tokenFeatures
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:1:16:1:24 | "mongodb" | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:8 | find | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | 'arguments' object of method find of interface Collection | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | exceptional return of method find of interface Collection | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:5:3:26 | return of method find of interface Collection | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:3:10:3:14 | query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:6:16:6:25 | "mongoose" | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:8 | find | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | 'arguments' object of method find of interface Model | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | exceptional return of method find of interface Model | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:5:8:26 | return of method find of interface Model | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:8:10:8:14 | query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:8 | find | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | 'arguments' object of method find of interface Query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | exceptional return of method find of interface Query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | find(qu ... ): any; | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:5:11:26 | return of method find of interface Query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | contextSurroundingFunctionParameters | (query) |
| autogenerated/NosqlAndSqlInjection/typed/shim.d.ts:11:10:11:14 | query | fileImports |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:1:1:0 | this | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:8:1:19 | * as mongodb | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:13:1:19 | mongodb | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:1:26:1:34 | "mongodb" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:13 | express | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ...  as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ...  as any | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:7:3:41 | express ...  as any | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:23 | require | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | exceptional return of require("express") | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:34 | require("express") | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ...  as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ...  as any | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:17:3:41 | require ...  as any | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:3:25:3:33 | "express" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:16 | bodyParser | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ...  as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ...  as any | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyPar ...  as any | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:7:4:48 | bodyParser | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:26 | require | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | exceptional return of require ... arser") | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:41 | require ... arser") | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ...  as any | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ...  as any | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:20:4:48 | require ...  as any | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:4:28:4:40 | "body-parser" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | 'arguments' object of function getCollection | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | declare ... ection; | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | exceptional return of function getCollection | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:1:6:53 | return of function getCollection | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:6:18:6:30 | getCollection | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:7 | app | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:5:8:19 | app = express() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:17 | express | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | exceptional return of express() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:8:11:8:19 | express() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:3 | app | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:7 | app.use | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | app.use ... json()) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:1:10:26 | exceptional return of app.use ... json()) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:5:10:7 | use | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:18 | bodyParser | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:23 | bodyParser.json | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | bodyParser.json() | receiverName | app |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:9:10:25 | exceptional return of bodyParser.json() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:10:20:10:23 | json | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:3 | app | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:12:8 | app.post | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:1:15:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:5:12:8 | post | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:10:12:16 | "/find" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:19:15:1 | return of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:20:12:22 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:12:25:12:27 | res | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:7 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:7:13:32 | v = JSO ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:14 | JSON | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:20 | JSON.parse | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:11:13:32 | exceptional return of JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:16:13:20 | parse | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:24 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:29 | req.body | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:22:13:31 | req.body.x | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:26:13:29 | body | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:13:31:13:31 | x | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:15 | getCollection | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | exceptional return of getCollection() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:17 | getCollection() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:22 | getCollection().find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | exceptional return of getColl ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:3:14:33 | getColl ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:19:14:22 | find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | CalleeFlexibleAccessPath | getCollection().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:24:14:32 | { id: v } | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:27 | id | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:26:14:30 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | CalleeFlexibleAccessPath | getCollection().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | enclosingFunctionBody | req res v JSON parse req body x getCollection find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:14:30:14:30 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:8:17:20 | * as mongoose | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:13:17:20 | mongoose | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:17:27:17:36 | "mongoose" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | 'arguments' object of function getMongooseModel | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | declare ... .Model; | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | exceptional return of function getMongooseModel | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:1:18:52 | return of function getMongooseModel | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:18:18:18:33 | getMongooseModel | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | 'arguments' object of function getMongooseQuery | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | declare ... .Query; | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | exceptional return of function getMongooseQuery | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:1:19:52 | return of function getMongooseQuery | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:19:18:19:33 | getMongooseQuery | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:3 | app | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:20:8 | app.post | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:1:24:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:5:20:8 | post | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:10:20:16 | "/find" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:19:24:1 | return of anonymous function | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:20:20:22 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:20:25:20:27 | res | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:7 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:7:21:32 | v = JSO ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:14 | JSON | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:20 | JSON.parse | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:11:21:32 | exceptional return of JSON.pa ... body.x) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:16:21:20 | parse | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:24 | req | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:29 | req.body | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:22:21:31 | req.body.x | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:26:21:29 | body | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:21:31:21:31 | x | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:18 | getMongooseModel | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | exceptional return of getMongooseModel() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:20 | getMongooseModel() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:25 | getMong ... ().find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | exceptional return of getMong ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:3:22:36 | getMong ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:22:22:25 | find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | CalleeFlexibleAccessPath | getMongooseModel().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:27:22:35 | { id: v } | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:30 | id | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:29:22:33 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | CalleeFlexibleAccessPath | getMongooseModel().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:22:33:22:33 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:18 | getMongooseQuery | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | exceptional return of getMongooseQuery() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:20 | getMongooseQuery() | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:25 | getMong ... ().find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | exceptional return of getMong ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:3:23:36 | getMong ... d: v }) | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:22:23:25 | find | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | CalleeFlexibleAccessPath | getMongooseQuery().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:27:23:35 | { id: v } | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:30 | id | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:29:23:33 | id: v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | CalleeFlexibleAccessPath | getMongooseQuery().find |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | enclosingFunctionBody | req res v JSON parse req body x getMongooseModel find id v getMongooseQuery find id v |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/typed/typedClient.ts:23:33:23:33 | v | fileImports | body-parser express mongodb mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:0 | this | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | dbClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | module | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:1:1:1 | require | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:12 | dbClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClien ... oClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:5:1:45 | dbClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:22 | require | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | exceptional return of require("mongodb") | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:33 | require("mongodb") | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:16:1:45 | require ... oClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:24:1:32 | "mongodb" | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:1:35:1:45 | MongoClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:4 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:3:2:11 | db = null | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:2:8:2:11 | null | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:6 | module | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:3:14 | module.exports | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n  }\\n} | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:1:13:1 | module. ... ;\\n  }\\n} | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:8:3:14 | exports | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n  db: ... ;\\n  }\\n} | assignedToPropName | exports |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n  db: ... ;\\n  }\\n} | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n  db: ... ;\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:3:18:13:1 | {\\n  db: ... ;\\n  }\\n} | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:4:4 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:3:6:3 | db: ()  ... db;\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | enclosingFunctionBody | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | enclosingFunctionName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:4:6 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | enclosingFunctionBody | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | enclosingFunctionName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | 'arguments' object of method db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n  } | assignedToPropName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | () => { ... db;\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | enclosingFunctionBody | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | enclosingFunctionName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | exceptional return of method db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | enclosingFunctionBody | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | enclosingFunctionName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:4:7:6:3 | return of method db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | enclosingFunctionBody | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | enclosingFunctionName | db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:5:12:5:13 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:7:9 | connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:3:12:3 | connect ... });\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:11 | dbClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:12 | fn | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:7:13 | fn | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | 'arguments' object of method connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | exceptional return of method connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n  } | assignedToPropName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n  } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n  } | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | fn => { ... });\\n  } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:7:12:12:3 | return of method connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:12 | dbClient | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:8:20 | dbClient.connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n    }) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n    }) | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n    }) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n    }) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | dbClien ... \\n    }) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n    }) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n    }) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n    }) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:5:11:6 | exceptional return of dbClien ... \\n    }) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:14:8:20 | connect | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:28 | process | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:32 | process.env | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | CalleeFlexibleAccessPath | dbClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:22:8:39 | process.env.DB_URL | receiverName | dbClient |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:30:8:32 | env | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:34:8:39 | DB_URL | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | CalleeFlexibleAccessPath | dbClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | contextSurroundingFunctionParameters | (fn) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:42:8:43 | {} | receiverName | dbClient |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:8:45 | fn | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | 'arguments' object of anonymous function | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | CalleeFlexibleAccessPath | dbClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | (err, c ... ;\\n    } | receiverName | dbClient |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | exceptional return of anonymous function | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:46:11:5 | return of anonymous function | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:47:8:49 | err | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:8:52:8:57 | client | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:8 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:7:9:41 | db = cl ... B_NAME) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:17 | client | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:20 | client.db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | client. ... B_NAME) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:12:9:41 | exceptional return of client. ... B_NAME) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:19:9:20 | db | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:28 | process | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:32 | process.env | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | CalleeFlexibleAccessPath | client.db |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:22:9:40 | process.env.DB_NAME | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:30:9:32 | env | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:9:34:9:40 | DB_NAME | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:15 | fn | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | exceptional return of fn(err) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:14:10:20 | fn(err) | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | CalleeFlexibleAccessPath | fn |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | contextFunctionInterfaces | connect(fn)\ndb() |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | contextSurroundingFunctionParameters | (fn)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | enclosingFunctionBody | fn dbClient connect process env DB_URL err client db client db process env DB_NAME fn err |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | enclosingFunctionName | connect |
| autogenerated/NosqlAndSqlInjection/untyped/dbo.js:10:17:10:19 | err | fileImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:0 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:1:1:1 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:11 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:5:1:32 | express ... press') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:21 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | exceptional return of require('express') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:15:1:32 | require('express') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:1:23:1:31 | 'express' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:7 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:5:2:19 | app = express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:17 | express | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | exceptional return of express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:2:11:2:19 | express() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import  ... /core"; | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import  ... /core"; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:1:4:40 | import  ... /core"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:10:4:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:4:25:4:39 | "@octokit/core" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:9 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:7:5:25 | kit = new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | exceptional return of new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:13:5:25 | new Octokit() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:5:17:5:23 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:7:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ...  `);\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ...  `);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | app.get ...  `);\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ...  `);\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ...  `);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:1:21:2 | exceptional return of app.get ...  `);\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:5:7:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:9:7:19 | '/post/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:7:21 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | functio ...   `);\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:22:21:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:31:7:33 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:7:36:7:38 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:11:8:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:16:8:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:20:8:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:8:27:8:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:10:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n    `) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n    `) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n    `) | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n    `) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:11:20:6 | respons ... \\n    `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:24 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:10:32 | kit.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n    `) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n    `) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n    `) | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n    `) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | exceptional return of kit.gra ... \\n    `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n    `) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n    `) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n    `) | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n    `) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:22:20:6 | kit.gra ... \\n    `) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:26:10:32 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | CalleeFlexibleAccessPath | kit.graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | calleeImports | @octokit/core |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:34:20:5 | `\\n      ... }\\n    ` | receiverName | kit |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:10:35:12:43 | \\n       ... name: " | stringConcatenatedWith |  -endpoint- id + '") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n    ' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:46:12:47 | id | stringConcatenatedWith | '\n      query {\n        repository(owner: "github", name: "' -endpoint- '") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n    ' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | enclosingFunctionBody | req res id req params id response kit graphql \n      query {\n        repository(owner: "github", name: " id ") {\n          object(expression: "master:foo") {\n            ... on Blob {\n              text\n            }\n          }\n        }\n      }\n     |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:12:49:20:4 | ") {\\n   ...  }\\n     | stringConcatenatedWith | '\n      query {\n        repository(owner: "github", name: "' + id -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import  ... aphql"; | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import  ... aphql"; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:1:23:62 | import  ... aphql"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:10:23:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:19:23:35 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:23:44:23:61 | "@octokit/graphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:25:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:1:34:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:5:25:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:9:25:20 | '/user/:id/' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:25:22 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:23:34:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:32:25:34 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:25:37:25:39 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:11:26:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:16:26:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:20:26:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:26:27:26:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:11:27:41 | respons ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:28 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | exceptional return of graphql(`foo ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:22:27:41 | graphql(`foo ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | CalleeFlexibleAccessPath | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | calleeImports | @octokit/graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:30:27:40 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:31:27:34 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:27:37:27:38 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:19 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraph ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:11:29:48 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:39 | withCustomRequest | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | exceptional return of withCus ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:23:29:48 | withCus ... equest) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | CalleeFlexibleAccessPath | withCustomRequest |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | calleeImports | @octokit/graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:29:41:29:47 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:18 | response | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:11:30:43 | respons ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:30 | myGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | exceptional return of myGraph ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:22:30:43 | myGraph ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | CalleeFlexibleAccessPath | myGraphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | calleeImports | @octokit/graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:32:30:42 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:33:30:36 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:30:39:30:40 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:22 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDef ... lts({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:11:32:45 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:32 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:41 | graphql.defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | exceptional return of graphql.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:26:32:45 | graphql.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:34:32:41 | defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | CalleeFlexibleAccessPath | graphql.defaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | calleeImports | @octokit/graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:32:43:32:44 | {} | receiverName | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:16 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | exceptional return of withDef ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:5:33:29 | withDef ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | CalleeFlexibleAccessPath | withDefaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | calleeImports | @octokit/graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:18:33:28 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:19:33:22 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | enclosingFunctionBody | req res id req params id response graphql foo  id myGraphql withCustomRequest request response myGraphql foo  id withDefaults graphql defaults withDefaults foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:33:25:33:26 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:17 | { request } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:7:36:47 | { reque ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:9:36:15 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:27 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | exceptional return of require ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:21:36:47 | require ... quest") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:36:29:36:46 | "@octokit/request" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:38:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:1:49:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:5:38:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:9:38:23 | '/article/:id/' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:38:25 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | async f ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:26:49:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:41:38:43 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:38:46:38:48 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:11:39:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:16:39:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:20:39:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:39:27:39:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:40:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result  ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result  ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result  ... \\n    }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result  ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:11:45:6 | result  ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n    }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:20:45:6 | await r ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:40:32 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n    }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | exceptional return of request ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n    }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:26:45:6 | request ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | CalleeFlexibleAccessPath | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:34:40:48 | "POST /graphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | CalleeFlexibleAccessPath | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:40:51:45:5 | {\\n      ... K\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:41:13 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:7:43:7 | headers ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | CalleeFlexibleAccessPath | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | InputAccessPathFromCallee | 1.headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | assignedToPropName | headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:41:16:43:7 | {\\n      ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:21 | authorization | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:9:42:71 | authori ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | CalleeFlexibleAccessPath | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | InputAccessPathFromCallee | 1.headers.authorization |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | assignedToPropName | authorization |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:42:24:42:71 | "token  ... 000001" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:7:44:24 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | CalleeFlexibleAccessPath | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | InputAccessPathFromCallee | 1.query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | assignedToPropName | query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:14:44:24 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:15:44:18 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:44:21:44:22 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:22 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDef ... lts({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:11:47:45 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:32 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:41 | request.defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | exceptional return of request.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:26:47:45 | request.defaults({}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:34:47:41 | defaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | CalleeFlexibleAccessPath | request.defaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:47:43:47:44 | {} | receiverName | request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:16 | withDefaults | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | exceptional return of withDef ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:5:48:57 | withDef ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | CalleeFlexibleAccessPath | withDefaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:18:48:32 | "POST /graphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | CalleeFlexibleAccessPath | withDefaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:35:48:56 | { query ... {id}` } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:41 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:37:48:54 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | CalleeFlexibleAccessPath | withDefaults |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | InputAccessPathFromCallee | 1.query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | assignedToPropName | query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | calleeImports | @octokit/request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:44:48:54 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:45:48:48 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | enclosingFunctionBody | req res id req params id result request POST /graphql headers authorization token 0000000000000000000000000000000000000001 query foo  id withDefaults request defaults withDefaults POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:48:51:48:52 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import  ... /rest"; | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import  ... /rest"; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:1:51:48 | import  ... /rest"; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:16 | Octokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:10:51:24 | Octokit as Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:21:51:24 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:51:33:51:47 | "@octokit/rest" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:10 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:7:52:23 | kit2 = new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | exceptional return of new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:14:52:23 | new Core() | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:52:18:52:21 | Core | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:54:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:1:59:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:5:54:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:9:54:21 | '/event/:id/' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:54:23 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | async f ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:24:59:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:39:54:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:54:44:54:46 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:11:55:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:16:55:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:20:55:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:55:27:55:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result  ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result  ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result  ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result  ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:11:56:50 | result  ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:20:56:50 | await k ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:29 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:37 | kit2.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | exceptional return of kit2.gr ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:26:56:50 | kit2.gr ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:31:56:37 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | CalleeFlexibleAccessPath | kit2.graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | calleeImports | @octokit/rest |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:39:56:49 | `foo ${id}` | receiverName | kit2 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:40:56:43 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:56:46:56:47 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:17 | result2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:11:58:79 | result2 ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:21:58:79 | await k ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:30 | kit2 | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:38 | kit2.request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | exceptional return of kit2.re ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:27:58:79 | kit2.re ... id}` }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:32:58:38 | request | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | CalleeFlexibleAccessPath | kit2.request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | calleeImports | @octokit/rest |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:40:58:54 | "POST /graphql" | receiverName | kit2 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | CalleeFlexibleAccessPath | kit2.request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | calleeImports | @octokit/rest |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:57:58:78 | { query ... {id}` } | receiverName | kit2 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:63 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:59:58:76 | query: `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | CalleeFlexibleAccessPath | kit2.request |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | InputAccessPathFromCallee | 1.query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | assignedToPropName | query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | calleeImports | @octokit/rest |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:66:58:76 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:67:58:70 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | enclosingFunctionBody | req res id req params id result kit2 graphql foo  id result2 kit2 request POST /graphql query foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:58:73:58:74 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import  ... aphql'; | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import  ... aphql'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:1:61:65 | import  ... aphql'; | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:16 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | graphql ... Graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:10:61:33 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:21:61:33 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:36:61:46 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:61:56:61:64 | 'graphql' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:62:10 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema  ... \\n  }\\n`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema  ... \\n  }\\n`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:5:66:2 | schema  ... \\n  }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:62:24 | buildSchema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n  }\\n`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n  }\\n`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | buildSc ... \\n  }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n  }\\n`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n  }\\n`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:14:66:2 | exceptional return of buildSc ... \\n  }\\n`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | CalleeFlexibleAccessPath | buildSchema |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | calleeImports | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:26:66:1 | `\\n  typ ... g\\n  }\\n` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n  type ... ng\\n  }\\n | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n  type ... ng\\n  }\\n | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n  type ... ng\\n  }\\n | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:62:27:66:0 | \\n  type ... ng\\n  }\\n | stringConcatenatedWith |  -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:67:8 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root =  ... \\n  },\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root =  ... \\n  },\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:5:71:1 | root =  ... \\n  },\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n  hel ... \\n  },\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n  hel ... \\n  },\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:67:12:71:1 | {\\n  hel ... \\n  },\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:68:7 | hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:3:70:3 | hello:  ... !';\\n  } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | enclosingFunctionBody | Hello world! |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | enclosingFunctionName | hello |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | 'arguments' object of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n  } | assignedToPropName | hello |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n  } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | () => { ... !';\\n  } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | enclosingFunctionBody | Hello world! |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | enclosingFunctionName | hello |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | exceptional return of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | enclosingFunctionBody | Hello world! |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | enclosingFunctionName | hello |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:68:10:70:3 | return of method hello | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | enclosingFunctionBody | Hello world! |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | enclosingFunctionName | hello |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:69:12:69:25 | 'Hello world!' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:73:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ...   })\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | app.get ...   })\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ...   })\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:1:113:2 | exceptional return of app.get ...   })\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:5:73:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:9:73:20 | '/thing/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:73:22 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | async f ... \\n  })\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:23:113:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:38:73:40 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:73:43:73:45 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:10 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:9:74:25 | id = req.query.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:16 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:22 | req.query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:14:74:25 | req.query.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:18:74:22 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:74:24:74:25 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:14 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result  ... , root) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result  ... , root) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result  ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result  ... , root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:9:75:71 | result  ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:18:75:71 | await n ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:36 | nativeGraphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | exceptional return of nativeG ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:24:75:71 | nativeG ... , root) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | CalleeFlexibleAccessPath | nativeGraphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | calleeImports | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:38:75:43 | schema | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:52 | "{ foo" | stringConcatenatedWith |  -endpoint- id + ' }' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:57 | "{ foo" + id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | CalleeFlexibleAccessPath | nativeGraphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | calleeImports | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:46:75:64 | "{ foo" + id + " }" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:56:75:57 | id | stringConcatenatedWith | '{ foo' -endpoint- ' }' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:61:75:64 | " }" | stringConcatenatedWith | '{ foo' + id -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | CalleeFlexibleAccessPath | nativeGraphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | calleeImports | graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:75:67:75:70 | root | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:77:7 | fetch | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n  }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n  }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | exceptional return of fetch(" ... })\\n  }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n  }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n  }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:3:92:4 | fetch(" ... })\\n  }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:9:77:47 | "https: ... raphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:77:50:92:3 | {\\n    m ...  })\\n  } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:10 | method | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:5:78:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | InputAccessPathFromCallee | 1.method |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | assignedToPropName | method |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:78:13:78:18 | "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:79:11 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:5:81:5 | headers ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | InputAccessPathFromCallee | 1.headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | assignedToPropName | headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:79:14:81:5 | {\\n      ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:20 | "Content-Type" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:7:80:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | InputAccessPathFromCallee | 1.headers.Content-Type |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | assignedToPropName | Content-Type |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:80:23:80:40 | "application/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:82:8 | body | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:5:91:6 | body: J ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:14 | JSON | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:82:24 | JSON.stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | InputAccessPathFromCallee | 1.body |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | assignedToPropName | body |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | JSON.st ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:11:91:6 | exceptional return of JSON.st ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:16:82:24 | stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:82:26:91:5 | {\\n      ... `\\n    } | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:84:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:7:90:8 | query:  ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | InputAccessPathFromCallee | 0.query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | assignedToPropName | query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:14:90:8 | `{\\n     ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:84:15:88:10 | {\\n      ...         | stringConcatenatedWith |  -endpoint- id + '\n        }\n      }' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:13:88:14 | id | stringConcatenatedWith | '{\n        thing {\n          name\n          url\n          ' -endpoint- '\n        }\n      }' |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:88:16:90:7 | \\n        }\\n      } | stringConcatenatedWith | '{\n        thing {\n          name\n          url\n          ' + id -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:94:7 | fetch | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n  }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n  }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | exceptional return of fetch(" ... })\\n  }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n  }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n  }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:3:112:4 | fetch(" ... })\\n  }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:9:94:47 | "https: ... raphql" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:94:50:112:3 | {\\n    m ...  })\\n  } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:10 | method | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:5:95:18 | method: "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | InputAccessPathFromCallee | 1.method |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | assignedToPropName | method |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:95:13:95:18 | "POST" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:96:11 | headers | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:5:98:5 | headers ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | InputAccessPathFromCallee | 1.headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | assignedToPropName | headers |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:96:14:98:5 | {\\n      ... "\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:20 | "Content-Type" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:7:97:40 | "Conten ... n/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | InputAccessPathFromCallee | 1.headers.Content-Type |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | assignedToPropName | Content-Type |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:97:23:97:40 | "application/json" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:99:8 | body | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:5:111:6 | body: J ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:14 | JSON | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:99:24 | JSON.stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | CalleeFlexibleAccessPath | fetch |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | InputAccessPathFromCallee | 1.body |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | assignedToPropName | body |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | JSON.st ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n    }) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n    }) | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:11:111:6 | exceptional return of JSON.st ... \\n    }) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:16:99:24 | stringify | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:99:26:111:5 | {\\n      ... }\\n    } | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:101:11 | query | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:7:107:8 | query:  ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | InputAccessPathFromCallee | 0.query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | assignedToPropName | query |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:14:107:8 | `{\\n     ...      }` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:101:15:107:7 | {\\n      ...       } | stringConcatenatedWith |  -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:108:15 | variables | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:7:110:7 | variabl ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | InputAccessPathFromCallee | 0.variables |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | assignedToPropName | variables |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:108:18:110:7 | {\\n      ...       } | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:10 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:9:109:14 | id: id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | InputAccessPathFromCallee | 0.variables.id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | enclosingFunctionBody | req res id req query id result nativeGraphql schema { foo id  } root fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n           id \n        }\n      } fetch https://my-grpahql-server.com/graphql method POST headers Content-Type application/json body JSON stringify query {\n        thing {\n          name\n          url\n          $id\n        }\n      } variables id id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:109:13:109:14 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:12 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github  ... ithub') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github  ... ithub') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:7:115:41 | github  ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:22 | require | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | exceptional return of require ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:16:115:41 | require ... ithub') | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:115:24:115:40 | '@actions/github' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:3 | app | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:116:7 | app.get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:1:121:2 | exceptional return of app.get ... T OK\\n}) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:5:116:7 | get | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:9:116:21 | '/event/:id/' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:116:23 | this | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | 'arguments' object of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | async f ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | exceptional return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:24:121:1 | return of anonymous function | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:39:116:41 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:116:44:116:46 | res | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:13 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:11:117:40 | kit = g ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:22 | github | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:33 | github.getOctokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | exceptional return of github. ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:17:117:40 | github. ... ("foo") | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:24:117:33 | getOctokit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | CalleeFlexibleAccessPath | github.getOctokit |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | calleeImports | @actions/github |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:117:35:117:39 | "foo" | receiverName | github |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:12 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:11:119:28 | id = req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:18 | req | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:25 | req.params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:16:119:28 | req.params.id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:20:119:25 | params | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:119:27:119:28 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:16 | result | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result  ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result  ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result  ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result  ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:11:120:49 | result  ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:20:120:49 | await k ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:28 | kit | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:36 | kit.graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | exceptional return of kit.gra ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:26:120:49 | kit.gra ... ${id}`) | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:30:120:36 | graphql | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | CalleeFlexibleAccessPath | kit.graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | calleeImports | @actions/github |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:38:120:48 | `foo ${id}` | receiverName | kit |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:39:120:42 | foo  | stringConcatenatedWith |  -endpoint- id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | contextFunctionInterfaces | hello() |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | enclosingFunctionBody | req res kit github getOctokit foo id req params id result kit graphql foo  id |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | fileImports | @actions/github @octokit/core @octokit/graphql @octokit/request @octokit/rest express graphql |
| autogenerated/NosqlAndSqlInjection/untyped/graphql.js:120:45:120:46 | id | stringConcatenatedWith | 'foo ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:0 | this | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | checkSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | schema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:1 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import  ...  'ajv'; | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import  ...  'ajv'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:1:1:22 | import  ...  'ajv'; | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:8:1:10 | Ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:1:17:1:21 | 'ajv' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import  ... press'; | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import  ... press'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:1:2:30 | import  ... press'; | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:8:2:14 | express | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:2:21:2:29 | 'express' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import  ... ngodb'; | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import  ... ngodb'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:1:3:38 | import  ... ngodb'; | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:10:3:20 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:3:29:3:37 | 'mongodb' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:9 | app | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:7:5:21 | app = express() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:19 | express | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | exceptional return of express() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:5:13:5:21 | express() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:7:12 | schema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema  ...    },\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema  ...    },\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:7:13:1 | schema  ...    },\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n    t ...    },\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n    t ...    },\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:7:16:13:1 | {\\n    t ...    },\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:8 | type | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:5:8:18 | type: 'object' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:8:11:8:18 | 'object' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:9:14 | properties | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:5:12:5 | propert ... ,\\n    } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n      ... ,\\n    } | assignedToPropName | properties |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n      ... ,\\n    } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n      ... ,\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:9:17:12:5 | {\\n      ... ,\\n    } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:12 | date | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:9:10:32 | date: { ... ring' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | assignedToPropName | date |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:15:10:32 | { type: 'string' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:20 | type | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:17:10:30 | type: 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:10:23:10:30 | 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:13 | title | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:9:11:33 | title:  ... ring' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:16:11:33 | { type: 'string' } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:21 | type | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:18:11:31 | type: 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:11:24:11:31 | 'string' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:9 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:7:14:21 | ajv = new Ajv() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | exceptional return of new Ajv() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:13:14:21 | new Ajv() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:14:17:14:19 | Ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:17 | checkSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSc ... schema) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:7:15:39 | checkSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:23 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:31 | ajv.compile | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | ajv.compile(schema) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:21:15:39 | exceptional return of ajv.compile(schema) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:25:15:31 | compile | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | CalleeFlexibleAccessPath | ajv.compile |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | calleeImports | ajv |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:15:33:15:38 | schema | receiverName | ajv |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:17:0 | this | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | 'arguments' object of function validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | exceptional return of function validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | functio ... null;\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:1:19:1 | return of function validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | contextSurroundingFunctionParameters | (x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:10:17:17 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:17:19:17:19 | x | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:12 | x | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | contextSurroundingFunctionParameters | (x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:12:18:20 | x != null | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | contextSurroundingFunctionParameters | (x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | enclosingFunctionBody | x x null |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | enclosingFunctionName | validate |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:18:17:18:20 | null | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:3 | app | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:21:8 | app.post | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ...  });\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | app.pos ...  });\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:1:37:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:5:21:8 | post | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:10:21:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:28 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:21:29 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | exceptional return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:29:37:1 | return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:30:21:32 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:21:35:21:37 | res | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:15 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:22:23 | MongoClient.connect | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n    }) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | MongoCl ... \\n    }) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:5:36:6 | exceptional return of MongoCl ... \\n    }) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:17:22:23 | connect | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:25:22:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | checkSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | schema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:22:58 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | (err, d ... K\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | exceptional return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:59:36:5 | return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:60:22:62 | err | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:22:65:22:66 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:13:23:38 | doc = d ... ('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:20 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:31 | db.collection | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | db.collection('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:19:23:38 | exceptional return of db.collection('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:22:23:31 | collection | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:23:33:23:37 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:19 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:15:25:48 | query = ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:26 | JSON | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:32 | JSON.parse | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | JSON.pa ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:23:25:48 | exceptional return of JSON.pa ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:28:25:32 | parse | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:36 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:42 | req.query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:34:25:47 | req.query.data | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:38:25:42 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:25:44:25:47 | data | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:23 | checkSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | checkSchema(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:13:26:30 | exceptional return of checkSchema(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | CalleeFlexibleAccessPath | checkSchema |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | calleeImports | ajv |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:26:25:26:29 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:13:27:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:17:27:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:27:22:27:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:15 | ajv | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:24 | ajv.validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ...  query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ...  query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ...  query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | ajv.val ...  query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ...  query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ...  query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ...  query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:13:29:39 | exceptional return of ajv.val ...  query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:29:17:29:24 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:13:30:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:17:30:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:30:22:30:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:20 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | exceptional return of validate(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:32:13:32:27 | validate(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:13:33:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:17:33:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:33:22:33:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:11 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:16 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:9:35:23 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:13:35:16 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data checkSchema query doc find query ajv validate schema query doc find query validate query doc find query doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:35:18:35:22 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import  ...  'joi'; | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import  ...  'joi'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:1:39:22 | import  ...  'joi'; | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:8:39:10 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:39:17:39:21 | 'joi' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:41:15 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSche ... title') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:7:44:24 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:21 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:41:28 | Joi.object | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | Joi.obj ... ed()\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:2 | exceptional return of Joi.obj ... ed()\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:7 | Joi.obj ... }).with | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | Joi.obj ... title') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:19:44:24 | exceptional return of Joi.obj ... title') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:23:41:28 | object | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | CalleeFlexibleAccessPath | Joi.object |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | calleeImports | joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:41:30:44:1 | {\\n    d ... red()\\n} | receiverName | Joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:8 | date | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:5:42:33 | date: J ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:13 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:20 | Joi.string | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | Joi.string() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:22 | exceptional return of Joi.string() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:31 | Joi.str ... equired | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | CalleeFlexibleAccessPath | Joi.object |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | InputAccessPathFromCallee | 0.date |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | assignedToPropName | date |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | calleeImports | joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | Joi.str ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:11:42:33 | exceptional return of Joi.str ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:15:42:20 | string | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:42:24:42:31 | required | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:9 | title | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:5:43:34 | title:  ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:14 | Joi | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:21 | Joi.string | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | Joi.string() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:23 | exceptional return of Joi.string() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:32 | Joi.str ... equired | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | CalleeFlexibleAccessPath | Joi.object |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | InputAccessPathFromCallee | 0.title |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | calleeImports | joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | Joi.str ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:12:43:34 | exceptional return of Joi.str ... uired() | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:16:43:21 | string | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:43:25:43:32 | required | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:4:44:7 | with | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | CalleeFlexibleAccessPath | Joi.object().with |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | calleeImports | joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:9:44:14 | 'date' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | CalleeFlexibleAccessPath | Joi.object().with |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | calleeImports | joi |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:44:17:44:23 | 'title' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:3 | app | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:46:8 | app.post | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ...  });\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | app.pos ...  });\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:1:64:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:5:46:8 | post | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:10:46:28 | '/documents/insert' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:30 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:46:31 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | exceptional return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:31:64:1 | return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:32:46:34 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:46:37:46:39 | res | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:15 | MongoClient | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:47:23 | MongoClient.connect | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n    }) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | MongoCl ... \\n    }) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:5:63:6 | exceptional return of MongoCl ... \\n    }) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:17:47:23 | connect | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:25:47:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:47:58 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | 'arguments' object of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | async ( ... }\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | exceptional return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:59:63:5 | return of anonymous function | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:66:47:68 | err | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:47:71:47:72 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:13:48:38 | doc = d ... ('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:20 | db | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:31 | db.collection | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | db.collection('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:19:48:38 | exceptional return of db.collection('doc') | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:22:48:31 | collection | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:48:33:48:37 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:19 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:15:50:48 | query = ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:26 | JSON | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:32 | JSON.parse | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | JSON.pa ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:23:50:48 | exceptional return of JSON.pa ... y.data) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:28:50:32 | parse | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:36 | req | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:42 | req.query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:34:50:47 | req.query.data | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:38:50:42 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:50:44:50:47 | data | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:22 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validat ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:15:51:50 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:34 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:43 | joiSchema.validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | exceptional return of joiSche ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:26:51:50 | joiSche ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:51:36:51:43 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:13:52:27 | !validate.error | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:21 | validate | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:14:52:27 | validate.error | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:52:23:52:27 | error | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:13:53:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:17:53:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:53:22:53:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:13:55:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:17:55:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:55:22:55:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:13:58:48 | await j ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:27 | joiSchema | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:41 | joiSche ... teAsync | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | exceptional return of joiSche ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:19:58:48 | joiSche ... (query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:58:29:58:41 | validateAsync | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:13:59:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:17:59:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:59:22:59:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:60:18:60:18 | e | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:15 | doc | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:20 | doc.find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:13:61:27 | exceptional return of doc.find(query) | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:17:61:20 | find | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | contextFunctionInterfaces | validate(x) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | enclosingFunctionBody | req res MongoClient connect mongodb://localhost:27017/test err db doc db collection doc query JSON parse req query data validate joiSchema validate query validate error doc find query doc find query joiSchema validateAsync query doc find query e doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | fileImports | ajv express joi mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/json-schema-validator.js:61:22:61:26 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:0 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | require | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:1:1:1 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:10 | http | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http =  ... "http") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http =  ... "http") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:7:1:28 | http =  ... "http") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:20 | require | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | exceptional return of require("http") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:14:1:28 | require("http") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:1:22:1:27 | "http" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:9 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:7:2:26 | url = require("url") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:19 | require | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | exceptional return of require("url") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:13:2:26 | require("url") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:2:21:2:25 | "url" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:10 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap =  ... dapjs") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap =  ... dapjs") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:7:3:30 | ldap =  ... dapjs") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:20 | require | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | exceptional return of require("ldapjs") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:14:3:30 | require("ldapjs") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:3:22:3:29 | "ldapjs" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:4:12 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client  ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client  ... 89",\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:7:6:2 | client  ... 89",\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:19 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:4:32 | ldap.createClient | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | exceptional return of ldap.cr ... 89",\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:16:6:2 | ldap.cr ... 89",\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:21:4:32 | createClient | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | CalleeFlexibleAccessPath | ldap.createClient |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:4:34:6:1 | {\\n  url ... 389",\\n} | receiverName | ldap |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:5 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:3:5:30 | url: "l ... 1:1389" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | CalleeFlexibleAccessPath | ldap.createClient |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | InputAccessPathFromCallee | 0.url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | assignedToPropName | url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:5:8:5:30 | "ldap:/ ... 1:1389" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:9:19 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitiz ... 2f");\\n} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:7:17:1 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:9:22 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | 'arguments' object of function sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | exceptional return of function sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | functio ... 2f");\\n} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:23:17:1 | return of function sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:9:33:9:37 | input | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:10:14 | input | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n    .replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n    .replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n    .replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n    .replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:12 | input\\n    .replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n  ... "\\\\2a") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n  ... "\\\\2a") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n  ... "\\\\2a") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n  ... "\\\\2a") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | exceptional return of input\\n  ... "\\\\2a") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n  ... "\\\\2a") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n  ... "\\\\2a") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n  ... "\\\\2a") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n  ... "\\\\2a") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:11:27 | input\\n  ... "\\\\2a") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n  ... replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n  ... replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n  ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n  ... replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:12 | input\\n  ... replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n  ... "\\\\28") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n  ... "\\\\28") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n  ... "\\\\28") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n  ... "\\\\28") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | exceptional return of input\\n  ... "\\\\28") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n  ... "\\\\28") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n  ... "\\\\28") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n  ... "\\\\28") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n  ... "\\\\28") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:12:27 | input\\n  ... "\\\\28") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n  ... replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n  ... replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n  ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n  ... replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:12 | input\\n  ... replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n  ... "\\\\29") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n  ... "\\\\29") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n  ... "\\\\29") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n  ... "\\\\29") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | exceptional return of input\\n  ... "\\\\29") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n  ... "\\\\29") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n  ... "\\\\29") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n  ... "\\\\29") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n  ... "\\\\29") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:13:27 | input\\n  ... "\\\\29") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n  ... replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n  ... replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n  ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n  ... replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:12 | input\\n  ... replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n  ... "\\\\5c") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n  ... "\\\\5c") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n  ... "\\\\5c") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n  ... "\\\\5c") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | exceptional return of input\\n  ... "\\\\5c") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n  ... "\\\\5c") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n  ... "\\\\5c") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n  ... "\\\\5c") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n  ... "\\\\5c") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:14:27 | input\\n  ... "\\\\5c") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n  ... replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n  ... replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n  ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n  ... replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:12 | input\\n  ... replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n  ... "\\\\00") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n  ... "\\\\00") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n  ... "\\\\00") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n  ... "\\\\00") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | exceptional return of input\\n  ... "\\\\00") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n  ... "\\\\00") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n  ... "\\\\00") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n  ... "\\\\00") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n  ... "\\\\00") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:15:27 | input\\n  ... "\\\\00") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n  ... replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n  ... replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n  ... replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n  ... replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:12 | input\\n  ... replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n  ... "\\\\2f") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n  ... "\\\\2f") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n  ... "\\\\2f") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n  ... "\\\\2f") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | exceptional return of input\\n  ... "\\\\2f") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n  ... "\\\\2f") | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n  ... "\\\\2f") | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n  ... "\\\\2f") | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n  ... "\\\\2f") | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:10:10:16:27 | input\\n  ... "\\\\2f") | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:6:11:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | CalleeFlexibleAccessPath | input.replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:14:11:18 | /\\*/g | receiverName | input |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | CalleeFlexibleAccessPath | input.replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:11:21:11:26 | "\\\\2a" | receiverName | input |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:6:12:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | CalleeFlexibleAccessPath | input.replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:14:12:18 | /\\(/g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | CalleeFlexibleAccessPath | input.replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:12:21:12:26 | "\\\\28" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:6:13:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | CalleeFlexibleAccessPath | input.replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:14:13:18 | /\\)/g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | CalleeFlexibleAccessPath | input.replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:13:21:13:26 | "\\\\29" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:6:14:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:14:14:18 | /\\\\/g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | CalleeFlexibleAccessPath | input.replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:14:21:14:26 | "\\\\5c" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:6:15:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:14:15:18 | /\\0/g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:15:21:15:26 | "\\\\00" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:6:16:12 | replace | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:14:16:18 | /\\//g | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | CalleeFlexibleAccessPath | input.replace().replace().replace().replace().replace().replace |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | contextSurroundingFunctionParameters | (input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | enclosingFunctionBody | input input replace /\\*/g \\2a replace /\\(/g \\28 replace /\\)/g \\29 replace /\\\\/g \\5c replace /\\0/g \\00 replace /\\//g \\2f |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | enclosingFunctionName | sanitizeInput |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:16:21:16:26 | "\\\\2f" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:19:12 | server | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server  ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:7:69:2 | server  ... T OK\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:19 | http | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:19:32 | http.createServer | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:16:69:2 | http.cr ... T OK\\n}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:21:19:32 | createServer | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:19:33 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | calleeImports | http |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | (req, r ... OT OK\\n} | receiverName | http |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:34:69:1 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:35:19:37 | req | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:19:40:19:42 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:7 | q | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:7:20:34 | q = url ... , true) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:13 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:19 | url.parse | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | exceptional return of url.par ... , true) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:11:20:34 | url.par ... , true) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:15:20:19 | parse | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:23 | req | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | calleeImports | url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:21:20:27 | req.url | receiverName | url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:25:20:27 | url | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | calleeImports | url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:20:30:20:33 | true | receiverName | url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:14 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | usernam ... sername | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:7:22:33 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:18 | q | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:24 | q.query | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:18:22:33 | q.query.username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:20:22:24 | query | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:22:26:22:33 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:24:11 | opts1 | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n  } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n  } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:7:26:3 | opts1 = ... )`,\\n  } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n    f ... )`,\\n  } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n    f ... )`,\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n    f ... )`,\\n  } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n    f ... )`,\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:24:15:26:3 | {\\n    f ... )`,\\n  } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:10 | filter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:5:25:57 | filter: ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | assignedToPropName | filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:13:25:57 | `(\|(nam ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:14:25:21 | (\|(name= | stringConcatenatedWith |  -endpoint- username + ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:24:25:31 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:33:25:43 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:46:25:53 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:25:55:25:56 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:8 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:15 | client.search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:3:28:59 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:10:28:15 | search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:17:28:27 | "o=example" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:30:28:34 | opts1 | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:36 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | functio ... res) {} | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:37:28:58 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:47:28:49 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:28:52:28:54 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:8 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:30:15 | client.search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ...  {}\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ...  {}\\n  ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ...  {}\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ...  {}\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | client. ...  {}\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ...  {}\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ...  {}\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ...  {}\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ...  {}\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:3:34:3 | exceptional return of client. ...  {}\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:30:10:30:15 | search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:31:5:31:15 | "o=example" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:5:32:61 | { filte ... e}))` } | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:12 | filter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:7:32:59 | filter: ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | InputAccessPathFromCallee | 1.filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | assignedToPropName | filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:15:32:59 | `(\|(nam ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:16:32:23 | (\|(name= | stringConcatenatedWith |  -endpoint- username + ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:26:32:33 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:35:32:45 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:48:32:55 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:32:57:32:58 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:4 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | functio ... res) {} | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:5:33:26 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:15:33:17 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:33:20:33:22 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:8 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:37:15 | client.search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ...  {}\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ...  {}\\n  ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ...  {}\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ...  {}\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | client. ...  {}\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ...  {}\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ...  {}\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ...  {}\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ...  {}\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:3:45:3 | exceptional return of client. ...  {}\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:37:10:37:15 | search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:38:5:38:15 | "o=example" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:39:5:43:5 | { // OK ... ,\\n    } | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:40:12 | filter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:7:42:11 | filter: ...   )}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | InputAccessPathFromCallee | 1.filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | assignedToPropName | filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:15:42:11 | `(\|(nam ...   )}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:16:40:23 | (\|(name= | stringConcatenatedWith |  -endpoint- sanitizeInput() + ')(username=' + sanitizeInput() + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:38 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | exceptional return of sanitiz ... ername) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:26:40:48 | sanitiz ... ername) | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + sanitizeInput() + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:50:40:60 | )(username= | stringConcatenatedWith | '(\|(name=' + sanitizeInput() -endpoint- sanitizeInput() + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:40:75 | sanitizeInput | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ...       ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ...       ) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ...       ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ...       ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | exceptional return of sanitiz ...       ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:40:63:42:7 | sanitiz ...       ) | stringConcatenatedWith | '(\|(name=' + sanitizeInput() + ')(username=' -endpoint- '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:42:9:42:10 | )) | stringConcatenatedWith | '(\|(name=' + sanitizeInput() + ')(username=' + sanitizeInput() -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:4 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | functio ... res) {} | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:5:44:26 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:15:44:17 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:44:20:44:22 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:48:7 | f | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n  }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n  }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:7:59:4 | f = new ... ],\\n  }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n  }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n  }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | exceptional return of new OrF ... ],\\n  }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n  }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n  }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:11:59:4 | new OrF ... ],\\n  }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:15:48:22 | OrFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | CalleeFlexibleAccessPath | OrFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:48:24:59:3 | {\\n    f ...  ],\\n  } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:49:11 | filters | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:5:58:5 | filters ... ,\\n    ] | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | CalleeFlexibleAccessPath | OrFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | InputAccessPathFromCallee | ?.filters |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | assignedToPropName | filters |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:49:14:58:5 | [\\n      ... ,\\n    ] | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | exceptional return of new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:7:53:8 | new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:11:50:24 | EqualityFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:50:26:53:7 | {\\n      ...       } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:17 | attribute | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:9:51:25 | attribute: "name" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | InputAccessPathFromCallee | ?.attribute |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | assignedToPropName | attribute |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:51:20:51:25 | "name" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:13 | value | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:9:52:23 | value: username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | InputAccessPathFromCallee | ?.value |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | assignedToPropName | value |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:52:16:52:23 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | exceptional return of new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:7:57:8 | new Equ ...      }) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:11:54:24 | EqualityFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:54:26:57:7 | {\\n      ...       } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:17 | attribute | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:9:55:29 | attribu ... ername" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | InputAccessPathFromCallee | ?.attribute |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | assignedToPropName | attribute |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:55:20:55:29 | "username" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:13 | value | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:9:56:23 | value: username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | CalleeFlexibleAccessPath | EqualityFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | InputAccessPathFromCallee | ?.value |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | assignedToPropName | value |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:56:16:56:23 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:8 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:15 | client.search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:3:61:67 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:10:61:15 | search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:17:61:27 | "o=example" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:30:61:42 | { filter: f } | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:37 | filter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:32:61:40 | filter: f | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | InputAccessPathFromCallee | 1.filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | assignedToPropName | filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:40:61:40 | f | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:44 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | functio ... res) {} | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:45:61:66 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:55:61:57 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:61:60:61:62 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:63:20 | parsedFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n  ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedF ... ))`\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:9:65:3 | parsedFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:27 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:63:39 | ldap.parseFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | exceptional return of ldap.pa ... ))`\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n  ) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n  ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n  ) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n  ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:24:65:3 | ldap.pa ... ))`\\n  ) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:63:29:63:39 | parseFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | CalleeFlexibleAccessPath | ldap.parseFilter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:5:64:49 | `(\|(nam ... ame}))` | receiverName | ldap |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:6:64:13 | (\|(name= | stringConcatenatedWith |  -endpoint- username + ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:16:64:23 | username | stringConcatenatedWith | '(\|(name=' -endpoint- ')(username=' + username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:25:64:35 | )(username= | stringConcatenatedWith | '(\|(name=' + username -endpoint- username + '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:38:64:45 | username | stringConcatenatedWith | '(\|(name=' + username + ')(username=' -endpoint- '))' |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:64:47:64:48 | )) | stringConcatenatedWith | '(\|(name=' + username + ')(username=' + username -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:8 | client | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:15 | client.search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:3:66:78 | exceptional return of client. ... es) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:10:66:15 | search | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:17:66:27 | "o=example" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:30:66:53 | { filte ... ilter } | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:37 | filter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:32:66:51 | filter: parsedFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | InputAccessPathFromCallee | 1.filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | assignedToPropName | filter |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:40:66:51 | parsedFilter | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:55 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | CalleeFlexibleAccessPath | client.search |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | functio ... res) {} | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:56:66:77 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:66:66:68 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:66:71:66:73 | res | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:10 | dn | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:9:68:66 | dn = ld ... dn) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:17 | ldap | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:25 | ldap.parseDN | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | exceptional return of ldap.pa ... dn) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:14:68:66 | ldap.pa ... dn) {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:19:68:25 | parseDN | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | CalleeFlexibleAccessPath | ldap.parseDN |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:27:68:42 | `cn=${username}` | receiverName | ldap |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:28:68:30 | cn= | stringConcatenatedWith |  -endpoint- username |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:33:68:40 | username | stringConcatenatedWith | 'cn=' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:44 | this | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | CalleeFlexibleAccessPath | ldap.parseDN |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | calleeImports | ldapjs |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | contextSurroundingFunctionParameters | (req, res)\n(err, dn) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | functio ...  dn) {} | receiverName | ldap |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:45:68:65 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | contextSurroundingFunctionParameters | (req, res)\n(err, dn) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:55:68:57 | err | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | contextSurroundingFunctionParameters | (req, res)\n(err, dn) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | enclosingFunctionBody | req res q url parse req url true username q query username opts1 filter (\|(name= username )(username= username )) client search o=example opts1 err res client search o=example filter (\|(name= username )(username= username )) err res client search o=example filter (\|(name= sanitizeInput username )(username= sanitizeInput username )) err res f OrFilter filters EqualityFilter attribute name value username EqualityFilter attribute username value username client search o=example filter f err res parsedFilter ldap parseFilter (\|(name= username )(username= username )) client search o=example filter parsedFilter err res dn ldap parseDN cn= username err dn |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:68:60:68:61 | dn | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:6 | server | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:13 | server.listen | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ...  => {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ...  => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | exceptional return of server. ...  => {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ...  => {}) | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ...  => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:1:71:28 | server. ...  => {}) | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:8:71:13 | listen | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | CalleeFlexibleAccessPath | server.listen |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | calleeImports | http |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:15:71:17 | 389 | receiverName | server |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | enclosingFunctionName | server.listen#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | 'arguments' object of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | CalleeFlexibleAccessPath | server.listen |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | calleeImports | http |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | () => {} | receiverName | server |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | enclosingFunctionName | server.listen#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | exceptional return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | contextFunctionInterfaces | sanitizeInput(input) |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | enclosingFunctionName | server.listen#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/ldap.js:71:20:71:27 | return of anonymous function | fileImports | http ldapjs url |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:0 | this | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | module | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:1:1:1 | require | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:12 | MarsDB | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB  ... arsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB  ... arsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:7:1:32 | MarsDB  ... arsdb") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:22 | require | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | exceptional return of require("marsdb") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:16:1:32 | require("marsdb") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:1:24:1:31 | "marsdb" | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:11 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:7:3:44 | myDoc = ... myDoc") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | exceptional return of new Mar ... myDoc") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:15:3:44 | new Mar ... myDoc") | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:24 | MarsDB | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:19:3:35 | MarsDB.Collection | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:26:3:35 | Collection | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | CalleeFlexibleAccessPath | MarsDB.Collection |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | calleeImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:3:37:3:43 | "myDoc" | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:5:8 | db | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n  myDoc\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n  myDoc\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:7:7:1 | db = {\\n  myDoc\\n} | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n  myDoc\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n  myDoc\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:5:12:7:1 | {\\n  myDoc\\n} | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | assignedToPropName | myDoc |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:6:3:6:7 | myDoc | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:6 | module | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:14 | module.exports | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:1:9:19 | module.exports = db | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:8:9:14 | exports | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | assignedToPropName | exports |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-from.js:9:18:9:19 | db | fileImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:0 | this | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | db | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:1:1:1 | require | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:13 | express | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:7:1:34 | express ... press") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:23 | require | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | exceptional return of require("express") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:17:1:34 | require("express") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:1:25:1:33 | "express" | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:16 | bodyParser | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyPar ... arser") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:7:2:41 | bodyParser | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:26 | require | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | exceptional return of require ... arser") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:20:2:41 | require ... arser") | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:2:28:2:40 | "body-parser" | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:8 | db | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:7:3:40 | db = re ... -from') | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:18 | require | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | exceptional return of require ... -from') | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:12:3:40 | require ... -from') | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:3:20:3:39 | './marsdb-flow-from' | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:9 | app | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:7:5:21 | app = express() | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:19 | express | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | exceptional return of express() | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:5:13:5:21 | express() | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:3 | app | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:7 | app.use | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | app.use ... rue })) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:1:7:50 | exceptional return of app.use ... rue })) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:5:7:7 | use | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:18 | bodyParser | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:29 | bodyPar ... encoded | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | bodyPar ... true }) | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:9:7:49 | exceptional return of bodyPar ... true }) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:20:7:29 | urlencoded | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:31:7:48 | { extended: true } | receiverName | bodyParser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:40 | extended | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:33:7:46 | extended: true | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | InputAccessPathFromCallee | 0.extended |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | assignedToPropName | extended |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:7:43:7:46 | true | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:3 | app | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:9:8 | app.post | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | app.pos ... {});\\n}) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:1:15:2 | exceptional return of app.pos ... {});\\n}) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:5:9:8 | post | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:10:9:26 | "/documents/find" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:9:28 | db | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | 'arguments' object of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | (req, r ...  {});\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | exceptional return of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:29:15:1 | return of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:30:9:32 | req | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:9:35:9:37 | res | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:13 | query | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:9:10:18 | query = {} | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:10:17:10:18 | {} | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:7 | query | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:13 | query.title | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:3:11:30 | query.t ... y.title | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:9:11:13 | title | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:19 | req | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:24 | req.body | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:17:11:30 | req.body.title | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:21:11:24 | body | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:11:26:11:30 | title | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:4 | db | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:10 | db.myDoc | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:15 | db.myDoc.find | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ...  => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ...  => {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ...  => {}) | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ...  => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | db.myDo ...  => {}) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ...  => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ...  => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ...  => {}) | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ...  => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:3:14:41 | exceptional return of db.myDo ...  => {}) | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:6:14:10 | myDoc | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:12:14:15 | find | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | CalleeFlexibleAccessPath | db.myDoc.find |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | calleeImports | ./marsdb-flow-from |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:17:14:21 | query | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | 'arguments' object of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | CalleeFlexibleAccessPath | db.myDoc.find |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | calleeImports | ./marsdb-flow-from |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | (err, data) => {} | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | exceptional return of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:24:14:40 | return of anonymous function | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:25:14:27 | err | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | enclosingFunctionBody | req res query query title req body title db myDoc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb-flow-to.js:14:30:14:33 | data | fileImports | ./marsdb-flow-from body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:0 | this | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | doc | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:1:1:1 | require | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:13 | express | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:7:1:34 | express ... press") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:23 | require | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | exceptional return of require("express") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:17:1:34 | require("express") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:1:25:1:33 | "express" | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:8 | MarsDB | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB  ... arsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB  ... arsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:3:2:28 | MarsDB  ... arsdb") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:18 | require | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | exceptional return of require("marsdb") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:12:2:28 | require("marsdb") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:2:20:2:27 | "marsdb" | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:12 | bodyParser | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyPar ... arser") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:3:3:37 | bodyParser | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:22 | require | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | exceptional return of require ... arser") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:16:3:37 | require ... arser") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:3:24:3:36 | "body-parser" | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:7 | doc | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:5:5:40 | doc = n ... myDoc") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | exceptional return of new Mar ... myDoc") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:11:5:40 | new Mar ... myDoc") | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:20 | MarsDB | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:15:5:31 | MarsDB.Collection | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:22:5:31 | Collection | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | CalleeFlexibleAccessPath | MarsDB.Collection |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | calleeImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:5:33:5:39 | "myDoc" | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:9 | app | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:7:7:21 | app = express() | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:19 | express | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | exceptional return of express() | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:7:13:7:21 | express() | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:3 | app | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:7 | app.use | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | app.use ... rue })) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:1:9:50 | exceptional return of app.use ... rue })) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:5:9:7 | use | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:18 | bodyParser | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:29 | bodyPar ... encoded | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | bodyPar ... true }) | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:20:9:29 | urlencoded | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:31:9:48 | { extended: true } | receiverName | bodyParser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:40 | extended | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:33:9:46 | extended: true | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | InputAccessPathFromCallee | 0.extended |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | assignedToPropName | extended |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:9:43:9:46 | true | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:3 | app | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:11:8 | app.post | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | app.pos ... {});\\n}) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:1:17:2 | exceptional return of app.pos ... {});\\n}) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:5:11:8 | post | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:10:11:26 | "/documents/find" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:11:28 | doc | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | 'arguments' object of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | (req, r ...  {});\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | exceptional return of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:29:17:1 | return of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:30:11:32 | req | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:11:35:11:37 | res | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:13 | query | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:9:12:18 | query = {} | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:12:17:12:18 | {} | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:7 | query | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:13 | query.title | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:3:13:30 | query.t ... y.title | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:9:13:13 | title | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:19 | req | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:24 | req.body | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:17:13:30 | req.body.title | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:21:13:24 | body | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:13:26:13:30 | title | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:5 | doc | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:10 | doc.find | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ...  => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ...  => {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ...  => {}) | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ...  => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | doc.fin ...  => {}) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ...  => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ...  => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ...  => {}) | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ...  => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:3:16:36 | exceptional return of doc.fin ...  => {}) | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:7:16:10 | find | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | calleeImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:12:16:16 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | 'arguments' object of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | calleeImports | marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | (err, data) => {} | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | exceptional return of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:19:16:35 | return of anonymous function | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:20:16:22 | err | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | contextSurroundingFunctionParameters | (req, res)\n(err, data) |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | enclosingFunctionBody | req res query query title req body title doc find query err data |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/marsdb.js:16:25:16:28 | data | fileImports | body-parser express marsdb |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:0 | this | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | doc | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:1:1:1 | require | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:13 | express | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:7:1:34 | express ... press") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:23 | require | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | exceptional return of require("express") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:17:1:34 | require("express") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:1:25:1:33 | "express" | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:11 | minimongo | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimon ... mongo") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:3:2:34 | minimongo | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:21 | require | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | exceptional return of require("minimongo") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:15:2:34 | require("minimongo") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:2:23:2:33 | "minimongo" | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:12 | bodyParser | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyPar ... arser") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:3:3:37 | bodyParser | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:22 | require | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | exceptional return of require ... arser") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:16:3:37 | require ... arser") | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:3:24:3:36 | "body-parser" | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:11 | LocalDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:5:5:32 | LocalDb ... emoryDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:23 | minimongo | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:15:5:32 | minimongo.MemoryDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:5:25:5:32 | MemoryDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:4 | db | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:3:6:20 | db = new LocalDb() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | exceptional return of new LocalDb() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:8:6:20 | new LocalDb() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:6:12:6:18 | LocalDb | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:5 | doc | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:3:7:17 | doc = db.myDocs | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:10 | db | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:9:7:17 | db.myDocs | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:7:12:7:17 | myDocs | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:9 | app | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:7:9:21 | app = express() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:19 | express | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | exceptional return of express() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:9:13:9:21 | express() | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:3 | app | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:7 | app.use | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | app.use ... rue })) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:1:11:50 | exceptional return of app.use ... rue })) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:5:11:7 | use | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:18 | bodyParser | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:29 | bodyPar ... encoded | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | bodyPar ... true }) | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:9:11:49 | exceptional return of bodyPar ... true }) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:20:11:29 | urlencoded | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:31:11:48 | { extended: true } | receiverName | bodyParser |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:40 | extended | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:33:11:46 | extended: true | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | InputAccessPathFromCallee | 0.extended |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | assignedToPropName | extended |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:11:43:11:46 | true | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:3 | app | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:13:8 | app.post | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | app.pos ... ry);\\n}) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:1:19:2 | exceptional return of app.pos ... ry);\\n}) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:5:13:8 | post | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:10:13:26 | "/documents/find" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:13:28 | doc | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | 'arguments' object of anonymous function | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | (req, r ... ery);\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | exceptional return of anonymous function | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:29:19:1 | return of anonymous function | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:30:13:32 | req | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:13:35:13:37 | res | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:13 | query | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:9:14:18 | query = {} | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:14:17:14:18 | {} | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:7 | query | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:13 | query.title | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:3:15:30 | query.t ... y.title | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:9:15:13 | title | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:19 | req | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:24 | req.body | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:17:15:30 | req.body.title | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:21:15:24 | body | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:15:26:15:30 | title | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:5 | doc | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:10 | doc.find | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | doc.find(query) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:3:18:17 | exceptional return of doc.find(query) | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:7:18:10 | find | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | calleeImports | minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | enclosingFunctionBody | req res query query title req body title doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | fileImports | body-parser express minimongo |
| autogenerated/NosqlAndSqlInjection/untyped/minimongo.js:18:12:18:16 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:0 | this | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:1:1:1 | useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:13 | express | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:7:1:34 | express ... press') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:23 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | exceptional return of require('express') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:17:1:34 | require('express') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:1:25:1:33 | 'express' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:13 | mongodb | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:7:2:34 | mongodb ... ngodb') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:23 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | exceptional return of require('mongodb') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:17:2:34 | require('mongodb') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:2:25:2:33 | 'mongodb' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:16 | bodyParser | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyPar ... arser') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:7:3:41 | bodyParser | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:26 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:20:3:41 | require ... arser') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:3:28:3:40 | 'body-parser' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:17 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoCl ... oClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:7:5:39 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:27 | mongodb | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:21:5:39 | mongodb.MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:5:29:5:39 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:9 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:7:7:21 | app = express() | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:19 | express | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | exceptional return of express() | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:7:13:7:21 | express() | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:7 | app.use | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | app.use ... rue })) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:1:9:50 | exceptional return of app.use ... rue })) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:5:9:7 | use | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:18 | bodyParser | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:29 | bodyPar ... encoded | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | bodyPar ... true }) | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:9:9:49 | exceptional return of bodyPar ... true }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:20:9:29 | urlencoded | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:31:9:48 | { extended: true } | receiverName | bodyParser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:40 | extended | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:33:9:46 | extended: true | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | InputAccessPathFromCallee | 0.extended |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | assignedToPropName | extended |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:9:43:9:46 | true | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:11:8 | app.post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:1:35:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:5:11:8 | post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:10:11:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:11:29 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:29:35:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:30:11:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:11:35:11:37 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:15 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:11:12:20 | query = {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:12:19:12:20 | {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:9 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:15 | query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:5:13:32 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:11:13:15 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:21 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:26 | req.body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:19:13:32 | req.body.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:23:13:26 | body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:13:28:13:32 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:14:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:5:34:6 | exceptional return of MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:17:14:23 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:25:14:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:14:58 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | (err, d ... }\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:59:34:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:60:14:62 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:14:65:14:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:13 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:11:15:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:18 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:17:15:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:20:15:29 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:15:31:15:35 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:7:18:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:11:18:14 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:18:16:18:20 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:7:21:48 | exceptional return of doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:11:21:14 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:16:21:47 | { title ... title } | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:22 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:18:21:45 | title:  ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:26 | '' | stringConcatenatedWith |  -endpoint- query.body.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | InputAccessPathFromCallee | 0.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:25:21:45 | '' + qu ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:34 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:39 | query.body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:30:21:45 | query.body.title | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:36:21:39 | body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:21:41:21:45 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | doc.fin ... r(1) }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:7:24:53 | exceptional return of doc.fin ... r(1) }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:11:24:14 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:16:24:52 | { title ... tr(1) } | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:22 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:18:24:50 | title:  ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:29 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:34 | query.body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:40 | query.body.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:47 | query.b ... .substr | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | exceptional return of query.b ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | InputAccessPathFromCallee | 0.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:25:24:50 | query.b ... bstr(1) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:31:24:34 | body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:36:24:40 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:42:24:47 | substr | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | CalleeFlexibleAccessPath | query.body.title.substr |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:24:49:24:49 | 1 | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:15 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:11:26:32 | title = ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:21 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:26 | req.body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:19:26:32 | req.body.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:23:26:26 | body | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:26:28:26:32 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:22 | typeof title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof  ... string" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof  ... string" | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof  ... string" | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof  ... string" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:11:27:35 | typeof  ... string" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:18:27:22 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:27:28:27:35 | "string" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:11 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:16 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:9:29:34 | exceptional return of doc.fin ... itle }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:13:29:16 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:18:29:33 | { title: title } | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:24 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:20:29:31 | title: title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | InputAccessPathFromCallee | 0.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:29:27:29:31 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:11 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:16 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | doc.fin ... tle) }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:9:32:46 | exceptional return of doc.fin ... tle) }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:13:32:16 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:18:32:45 | { title ... itle) } | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:24 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:20:32:43 | title:  ... (title) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:30 | JSON | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:36 | JSON.parse | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | InputAccessPathFromCallee | 0.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | JSON.parse(title) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:27:32:43 | exceptional return of JSON.parse(title) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:32:32:36 | parse | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query doc find title  query body title doc find title query body title substr 1 title req body title title string doc find title title doc find title JSON parse title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:32:38:32:42 | title | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:37:7 | app.get | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | app.get ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:1:45:2 | exceptional return of app.get ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:5:37:7 | get | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:9:37:14 | '/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:16 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:37:17 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:17:45:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:18:37:20 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:37:23:37:25 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:13 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:9:38:36 | query = ... am.id } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:17:38:36 | { id: req.param.id } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:20 | id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:19:38:34 | id: req.param.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:25 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:31 | req.param | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:23:38:34 | req.param.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:27:38:31 | param | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:38:33:38:34 | id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:39:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:5:44:6 | exceptional return of MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:17:39:23 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:25:39:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:39:58 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | (err, d ... ;\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:59:44:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:60:39:62 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:39:65:39:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:13 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:11:40:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:18 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:17:40:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:20:40:29 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:40:31:40:35 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:7:43:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:11:43:14 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | enclosingFunctionBody | req res query id req param id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:43:16:43:20 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:47:8 | app.post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:1:56:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:5:47:8 | post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:10:47:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:47:29 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:29:56:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:30:47:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:47:35:47:37 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:15 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:11:48:20 | query = {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:48:19:48:20 | {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:9 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:15 | query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:5:49:33 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:11:49:15 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:21 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:27 | req.query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:19:49:33 | req.query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:23:49:27 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:49:29:49:33 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:15 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:50:23 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:5:55:6 | exceptional return of MongoCl ... \\n    }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:17:50:23 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:25:50:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:50:58 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | (err, d ... ;\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:59:55:5 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:60:50:62 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:50:65:50:66 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:13 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:11:51:36 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:18 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:29 | db.collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:17:51:36 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:20:51:29 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:51:31:51:35 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:14 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:7:54:21 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:11:54:14 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:54:16:54:20 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:58:8 | app.post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | app.pos ... \\t});\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:1:67:2 | exceptional return of app.pos ... \\t});\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:5:58:8 | post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:10:58:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:28 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:58:29 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | (req, r ... \\n\\t});\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:29:67:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:30:58:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:58:35:58:37 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:12 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:8:59:17 | query = {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:59:16:59:17 | {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:6 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:12 | query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:2:60:30 | query.t ... y.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:8:60:12 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:18 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:24 | req.query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:16:60:30 | req.query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:20:60:24 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:60:26:60:30 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:12 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:61:20 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | MongoCl ... y);\\n\\t}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:2:66:3 | exceptional return of MongoCl ... y);\\n\\t}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:14:61:20 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:22:61:53 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:61:55 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | (err, c ... ry);\\n\\t} | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:56:66:2 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:57:61:59 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:61:62:61:67 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:9 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:7:62:49 | doc = c ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:18 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:21 | client.db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | client.db("MASTER") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:31 | exceptional return of client.db("MASTER") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:42 | client. ... lection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | client. ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:13:62:49 | exceptional return of client. ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:20:62:21 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | CalleeFlexibleAccessPath | client.db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:23:62:30 | "MASTER" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:33:62:42 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | CalleeFlexibleAccessPath | client.db().collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:62:44:62:48 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:5 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:10 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:3:65:17 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:7:65:10 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err client doc client db MASTER collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:65:12:65:16 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:69:8 | app.post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:1:86:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:5:69:8 | post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:10:69:29 | "/logs/count-by-tag" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:31 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:69:32 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | (req, r ... g });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:32:86:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:33:69:35 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:69:38:69:40 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:9 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:7:70:25 | tag = req.query.tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:15 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:21 | req.query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:13:70:25 | req.query.tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:17:70:21 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:70:23:70:25 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:72:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n  }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:3:78:4 | exceptional return of MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:15:72:21 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:29 | process | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:33 | process.env | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:23:72:40 | process.env.DB_URL | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:31:72:33 | env | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:35:72:40 | DB_URL | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:43:72:44 | {} | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:72:46 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | (err, c ... });\\n  } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:47:78:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:48:72:50 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:72:53:72:58 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:73:10 | client | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n      .db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n      .db | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n      .db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n      .db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:9 | client\\n      .db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | client\\n ... B_NAME) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:74:30 | exceptional return of client\\n ... B_NAME) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:17 | client\\n ... lection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | client\\n ... "logs") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:75:25 | exceptional return of client\\n ... "logs") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ...  .count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ...  .count | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ...  .count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ...  .count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:12 | client\\n ...  .count | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ...  tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ...  tag }) | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ...  tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ...  tag }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | client\\n ...  tag }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ...  tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ...  tag }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ...  tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ...  tag }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:73:5:77:27 | exceptional return of client\\n ...  tag }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:8:74:9 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:17 | process | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:21 | process.env | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | CalleeFlexibleAccessPath | client.db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:11:74:29 | process.env.DB_NAME | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:19:74:21 | env | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:74:23:74:29 | DB_NAME | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:8:75:17 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | CalleeFlexibleAccessPath | client.db().collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:75:19:75:24 | "logs" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:8:77:12 | count | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | CalleeFlexibleAccessPath | client.db().collection().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:14:77:26 | { tags: tag } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:19 | tags | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:16:77:24 | tags: tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | CalleeFlexibleAccessPath | client.db().collection().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | InputAccessPathFromCallee | 0.tags |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | assignedToPropName | tags |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | contextSurroundingFunctionParameters | (req, res)\n(err, client) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:77:22:77:24 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:17 | importedDbo | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importe ... bo.js") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:7:80:39 | importedDbo | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:27 | require | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | exceptional return of require("./dbo.js") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:21:80:39 | require("./dbo.js") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:80:29:80:38 | "./dbo.js" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:81:13 | importedDbo | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n    .db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n    .db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n    .db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n    .db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:7 | importedDbo\\n    .db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ...   .db() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ...   .db() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ...   .db() | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ...   .db() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | exceptional return of importe ...   .db() | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ...   .db() | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ...   .db() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ...   .db() | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ...   .db() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:82:9 | importe ...   .db() | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:15 | importe ... lection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | exceptional return of importe ... "logs") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:83:23 | importe ... "logs") | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ...  .count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ...  .count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ...  .count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ...  .count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:10 | importe ...  .count | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ...  tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ...  tag }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ...  tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ...  tag }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | exceptional return of importe ...  tag }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ...  tag }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ...  tag }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ...  tag }) | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ...  tag }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:81:3:85:25 | importe ...  tag }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:82:6:82:7 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:6:83:15 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | CalleeFlexibleAccessPath | importedDbo.db().collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | calleeImports | ./dbo.js |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:83:17:83:22 | "logs" | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:6:85:10 | count | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | CalleeFlexibleAccessPath | importedDbo.db().collection().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | calleeImports | ./dbo.js |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:12:85:24 | { tags: tag } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:17 | tags | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:14:85:22 | tags: tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | CalleeFlexibleAccessPath | importedDbo.db().collection().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | InputAccessPathFromCallee | 0.tags |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | assignedToPropName | tags |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | calleeImports | ./dbo.js |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | enclosingFunctionBody | req res tag req query tag MongoClient connect process env DB_URL err client client db process env DB_NAME collection logs count tags tag importedDbo require ./dbo.js importedDbo db collection logs count tags tag |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:85:20:85:22 | tag | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:89:7 | app.get | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | app.get ... am);\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:1:91:2 | exceptional return of app.get ... am);\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:5:89:7 | get | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:9:89:14 | '/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:89:16 | useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | (req, r ... ram);\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:17:91:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:18:89:20 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:89:23:89:25 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:11 | useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | exceptional return of useParams(req.param) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:3:90:22 | useParams(req.param) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:15 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | CalleeFlexibleAccessPath | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:13:90:21 | req.param | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | enclosingFunctionBody | req res useParams req param |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:90:17:90:21 | param | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:0 | this | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:92:1 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | 'arguments' object of function useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | exceptional return of function useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ...   });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ...   });\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | functio ...   });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:1:100:1 | return of function useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:10:92:18 | useParams | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:92:20:92:25 | params | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:11 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:7:93:31 | query = ... ms.id } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:15:93:31 | { id: params.id } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:18 | id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:17:93:29 | id: params.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:26 | params | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:21:93:29 | params.id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:93:28:93:29 | id | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:94:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n  }) | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n  }) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n  }) | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:3:99:4 | exceptional return of MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:15:94:21 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (params) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:23:94:54 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:94:56 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | (err, d ... y);\\n  } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:57:99:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:58:94:60 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:94:63:94:64 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:11 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:9:95:34 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:16 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:27 | db.collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:15:95:34 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:18:95:27 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:95:29:95:33 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:7 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:12 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:5:98:19 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:9:98:12 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | contextSurroundingFunctionParameters | (params)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | enclosingFunctionBody | params query id params id MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | enclosingFunctionName | useParams |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:98:14:98:18 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:3 | app | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:102:8 | app.post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | app.pos ... ry);\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:1:104:2 | exceptional return of app.pos ... ry);\\n}) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:5:102:8 | post | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:10:102:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:102:28 | useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | (req, r ... ery);\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:29:104:1 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:30:102:32 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:102:35:102:37 | res | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:10 | useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | exceptional return of useQuery(req.query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:3:103:21 | useQuery(req.query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:14 | req | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | CalleeFlexibleAccessPath | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:12:103:20 | req.query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | enclosingFunctionBody | req res useQuery req query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:103:16:103:20 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:0 | this | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:105:1 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | 'arguments' object of function useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | exceptional return of function useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ...   });\\n} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ...   });\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | functio ...   });\\n} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:1:114:1 | return of function useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:10:105:17 | useQuery | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:105:19:105:25 | queries | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:13 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:9:106:18 | query = {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:106:17:106:18 | {} | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:7 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:13 | query.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:3:107:29 | query.t ... s.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:9:107:13 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:23 | queries | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:17:107:29 | queries.title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:107:25:107:29 | title | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:13 | MongoClient | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:108:21 | MongoClient.connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n  }) | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n  }) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n  }) | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n  }) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n  }) | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:3:113:4 | exceptional return of MongoCl ... );\\n  }) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:15:108:21 | connect | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:23:108:54 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:108:56 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | 'arguments' object of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | (err, d ... y);\\n  } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | exceptional return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:57:113:3 | return of anonymous function | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:58:108:60 | err | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:108:63:108:64 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:11 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:9:109:34 | doc = d ... ('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:16 | db | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:27 | db.collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:15:109:34 | exceptional return of db.collection('doc') | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:18:109:27 | collection | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:109:29:109:33 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:7 | doc | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:12 | doc.find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:5:112:19 | exceptional return of doc.find(query) | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:9:112:12 | find | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | contextFunctionInterfaces | useParams(params)\nuseQuery(queries) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | contextSurroundingFunctionParameters | (queries)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | enclosingFunctionBody | queries query query title queries title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | enclosingFunctionName | useQuery |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | fileImports | ./dbo.js body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb.js:112:14:112:18 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:0 | this | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:1:1:1 | require | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:13 | express | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:7:1:34 | express ... press') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:23 | require | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | exceptional return of require('express') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:17:1:34 | require('express') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:1:25:1:33 | 'express' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:13 | mongodb | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:7:2:34 | mongodb ... ngodb') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:23 | require | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | exceptional return of require('mongodb') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:17:2:34 | require('mongodb') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:2:25:2:33 | 'mongodb' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:16 | bodyParser | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyPar ... arser') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:7:3:41 | bodyParser | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:26 | require | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:17 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoCl ... oClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:7:5:39 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:27 | mongodb | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:21:5:39 | mongodb.MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:5:29:5:39 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:9 | app | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:7:7:21 | app = express() | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:19 | express | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | exceptional return of express() | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:7:13:7:21 | express() | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:3 | app | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:7 | app.use | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | app.use ... lse })) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:1:9:51 | exceptional return of app.use ... lse })) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:5:9:7 | use | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:18 | bodyParser | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:29 | bodyPar ... encoded | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | bodyPar ... alse }) | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:9:9:50 | exceptional return of bodyPar ... alse }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:20:9:29 | urlencoded | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:31:9:49 | { extended: false } | receiverName | bodyParser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:40 | extended | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:33:9:47 | extended: false | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | CalleeFlexibleAccessPath | bodyParser.urlencoded |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | InputAccessPathFromCallee | 0.extended |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | assignedToPropName | extended |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | calleeImports | body-parser |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:9:43:9:47 | false | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:3 | app | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:11:8 | app.post | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | app.pos ...  });\\n}) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:1:20:2 | exceptional return of app.pos ...  });\\n}) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:5:11:8 | post | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:10:11:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:28 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:11:29 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:29:20:1 | return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:30:11:32 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:11:35:11:37 | res | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:15 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:11:12:20 | query = {} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:12:19:12:20 | {} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:9 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:15 | query.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:5:13:32 | query.t ... y.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:11:13:15 | title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:21 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:26 | req.body | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:19:13:32 | req.body.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:23:13:26 | body | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:13:28:13:32 | title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:15 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:14:23 | MongoClient.connect | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | MongoCl ... \\n    }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:5:19:6 | exceptional return of MongoCl ... \\n    }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:17:14:23 | connect | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:25:14:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:14:58 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | (err, d ... ;\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | exceptional return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:59:19:5 | return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:60:14:62 | err | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:14:65:14:66 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:13 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:11:15:36 | doc = d ... ('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:18 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:29 | db.collection | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | db.collection('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:17:15:36 | exceptional return of db.collection('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:20:15:29 | collection | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:15:31:15:35 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:9 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:14 | doc.find | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | doc.find(query) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:7:18:21 | exceptional return of doc.find(query) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:11:18:14 | find | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | enclosingFunctionBody | req res query query title req body title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:18:16:18:20 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:3 | app | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:22:8 | app.post | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | app.pos ...  });\\n}) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:1:31:2 | exceptional return of app.pos ...  });\\n}) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:5:22:8 | post | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:10:22:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:28 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:22:29 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | exceptional return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:29:31:1 | return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:30:22:32 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:22:35:22:37 | res | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:15 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:11:23:20 | query = {} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:23:19:23:20 | {} | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:9 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:15 | query.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:5:24:33 | query.t ... y.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:11:24:15 | title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:21 | req | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:27 | req.query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:19:24:33 | req.query.title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:23:24:27 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:24:29:24:33 | title | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:15 | MongoClient | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:25:23 | MongoClient.connect | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | MongoCl ... \\n    }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:5:30:6 | exceptional return of MongoCl ... \\n    }) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:17:25:23 | connect | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:25:25:56 | 'mongod ... 7/test' | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:25:58 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | 'arguments' object of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | CalleeFlexibleAccessPath | MongoClient.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | calleeImports | mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | (err, d ... ;\\n    } | receiverName | MongoClient |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | exceptional return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:59:30:5 | return of anonymous function | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:60:25:62 | err | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:25:65:25:66 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:13 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:11:26:36 | doc = d ... ('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:18 | db | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:29 | db.collection | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | db.collection('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:17:26:36 | exceptional return of db.collection('doc') | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:20:26:29 | collection | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | CalleeFlexibleAccessPath | db.collection |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:26:31:26:35 | 'doc' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:9 | doc | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:14 | doc.find | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | doc.find(query) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:7:29:21 | exceptional return of doc.find(query) | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:11:29:14 | find | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | CalleeFlexibleAccessPath | doc.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | contextSurroundingFunctionParameters | (req, res)\n(err, db) |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | enclosingFunctionBody | req res query query title req query title MongoClient connect mongodb://localhost:27017/test err db doc db collection doc doc find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | fileImports | body-parser express mongodb |
| autogenerated/NosqlAndSqlInjection/untyped/mongodb_bodySafe.js:29:16:29:20 | query | receiverName | doc |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:0 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:1 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:1:1:1:12 | 'use strict' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:13 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:7:2:34 | Express ... press') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:23 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | exceptional return of require('express') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:17:2:34 | require('express') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:2:25:2:33 | 'express' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:16 | BodyParser | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyPar ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:7:3:41 | BodyParser | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:26 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:14 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoos ... goose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:7:4:36 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:24 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | exceptional return of require('mongoose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:18:4:36 | require('mongoose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:4:26:4:35 | 'mongoose' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:8 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:16 | Mongoose.Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:1:5:33 | Mongoos ... Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:10:5:16 | Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:25 | global | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | assignedToPropName | Promise |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:20:5:33 | global.Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:5:27:5:33 | Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:8 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:16 | Mongoose.connect | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | Mongoos ... able1') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:1:6:51 | exceptional return of Mongoos ... able1') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:10:6:16 | connect | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | CalleeFlexibleAccessPath | Mongoose.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:6:18:6:50 | 'mongod ... table1' | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:9 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:7:8:21 | app = Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:19 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:8:13:8:21 | exceptional return of Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:3 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:7 | app.use | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | app.use ... json()) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:1:9:26 | exceptional return of app.use ... json()) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:5:9:7 | use | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:18 | BodyParser | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:23 | BodyParser.json | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | BodyParser.json() | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:9:9:25 | exceptional return of BodyParser.json() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:9:20:9:23 | json | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:11:14 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Documen ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:7:17:2 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:25 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:11:31 | Mongoose.model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | Mongoos ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:18:17:2 | exceptional return of Mongoos ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:27:11:31 | model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:33:11:42 | 'Document' | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:11:45:17:1 | {\\n    t ... tring\\n} | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:12:9 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:5:15:5 | title:  ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | InputAccessPathFromCallee | 1.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:12:12:15:5 | {\\n      ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:12 | type | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:9:13:20 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | InputAccessPathFromCallee | 1.title.type |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:13:15:13:20 | String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:14 | unique | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:9:14:20 | unique: true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | InputAccessPathFromCallee | 1.title.unique |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | assignedToPropName | unique |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:14:17:14:20 | true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:8 | type | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:5:16:16 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | InputAccessPathFromCallee | 1.type |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:16:11:16:16 | String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:3 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:19:8 | app.post | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | app.pos ... / OK\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:1:132:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:5:19:8 | post | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:10:19:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:28 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:19:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:29:132:1 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:30:19:32 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:19:35:19:37 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:15 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:11:20:20 | query = {} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:20:19:20:20 | {} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:9 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:15 | query.title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:5:21:32 | query.t ... y.title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:11:21:15 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:21 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:26 | req.body | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:19:21:32 | req.body.title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:23:21:26 | body | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:21:28:21:32 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:22 | Document.aggregate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | Documen ... query]) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:5:24:31 | exceptional return of Documen ... query]) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:14:24:22 | aggregate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | CalleeFlexibleAccessPath | Document.aggregate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:24:24:30 | [query] | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:24:25:24:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:18 | Document.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:5:27:25 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:14:27:18 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | CalleeFlexibleAccessPath | Document.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:27:20:27:24 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:23 | Document.deleteMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:5:30:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:14:30:23 | deleteMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | CalleeFlexibleAccessPath | Document.deleteMany |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:30:25:30:29 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:22 | Document.deleteOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:5:33:29 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:14:33:22 | deleteOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | CalleeFlexibleAccessPath | Document.deleteOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:33:24:33:28 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:21 | Document.distinct | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ...  query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | Documen ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ...  query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:5:36:36 | exceptional return of Documen ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:14:36:21 | distinct | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | CalleeFlexibleAccessPath | Document.distinct |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:23:36:28 | 'type' | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | CalleeFlexibleAccessPath | Document.distinct |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:36:31:36:35 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:17 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | Document.find(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:5:39:24 | exceptional return of Document.find(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:14:39:17 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:39:19:39:23 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:20 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:5:42:27 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:14:42:20 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:42:22:42:26 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:29 | Documen ... dDelete | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:5:45:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:14:45:29 | findOneAndDelete | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | CalleeFlexibleAccessPath | Document.findOneAndDelete |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:45:31:45:35 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:29 | Documen ... dRemove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:5:48:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:14:48:29 | findOneAndRemove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | CalleeFlexibleAccessPath | Document.findOneAndRemove |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:48:31:48:35 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:29 | Documen ... dUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:5:51:36 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:14:51:29 | findOneAndUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:51:31:51:35 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:23 | Document.replaceOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:5:54:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:14:54:23 | replaceOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | CalleeFlexibleAccessPath | Document.replaceOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:54:25:54:29 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:19 | Document.update | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:5:57:26 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:14:57:19 | update | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | CalleeFlexibleAccessPath | Document.update |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:57:21:57:25 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:23 | Document.updateMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:5:60:30 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:14:60:23 | updateMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | CalleeFlexibleAccessPath | Document.updateMany |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:60:25:60:29 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:19 | Document.updateOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:26 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:31 | Documen ... y).then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | Documen ... then(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:2:63:34 | exceptional return of Documen ... then(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:11:63:19 | updateOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | CalleeFlexibleAccessPath | Document.updateOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:21:63:25 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:28:63:31 | then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | CalleeFlexibleAccessPath | Document.updateOne().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:63:33:63:33 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:27 | Documen ... dUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | Documen ... on(){}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:2:65:51 | exceptional return of Documen ... on(){}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:11:65:27 | findByIdAndUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | CalleeFlexibleAccessPath | Document.findByIdAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:29:65:29 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | CalleeFlexibleAccessPath | Document.findByIdAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:32:65:36 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:38 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | CalleeFlexibleAccessPath | Document.findByIdAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | function(){} | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:65:39:65:50 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ...  query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | exceptional return of new Mon ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ...  query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:67:32 | new Mon ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:6 | new Mon ... \\n\\t\\t.and | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | exceptional return of new Mon ... on(){}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:2:68:27 | new Mon ... on(){}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:13 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:6:67:19 | Mongoose.Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:15:67:19 | Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:21:67:21 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:24:67:24 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:67:27:67:31 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:4:68:6 | and | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | CalleeFlexibleAccessPath | Mongoose.Query().and |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:8:68:12 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:14 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | CalleeFlexibleAccessPath | Mongoose.Query().and |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | function(){} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:68:15:68:26 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:18 | Document.where | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:71:25 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ...  .where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ...  .where | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ...  .where | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:14 | Documen ...  .where | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:72:21 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:6 | Documen ... \\n\\t\\t.and | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:73:13 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:5 | Documen ... K\\n\\t\\t.or | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:74:12 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:11 | Documen ... istinct | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ...  query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | Documen ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ...  query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:75:21 | exceptional return of Documen ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:10 | Documen ... comment | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:76:17 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:8 | Documen ... \\t.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:77:15 | exceptional return of Documen ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:7 | Documen ... \\t\\t.exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | Documen ... .exec() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:5:78:9 | exceptional return of Documen ... .exec() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:14:71:18 | where | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | CalleeFlexibleAccessPath | Document.where |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:71:20:71:24 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:10:72:14 | where | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | CalleeFlexibleAccessPath | Document.where().where |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:72:16:72:20 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:4:73:6 | and | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | CalleeFlexibleAccessPath | Document.where().where().and |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:73:8:73:12 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:4:74:5 | or | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | CalleeFlexibleAccessPath | Document.where().where().and().or |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:74:7:74:11 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:4:75:11 | distinct | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:13:75:13 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:75:16:75:20 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:4:76:10 | comment | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct().comment |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:76:12:76:16 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:4:77:8 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | CalleeFlexibleAccessPath | Document.where().where().and().or().distinct().comment().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:77:10:77:14 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:78:4:78:7 | exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:9 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:26 | Mongoos ... nection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:35 | Mongoos ... ).count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:2:81:42 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:11:81:26 | createConnection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:28:81:28 | X | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:31:81:35 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:81:37:81:41 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:9 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:26 | Mongoos ... nection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:35 | Mongoos ... ).model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | Mongoos ... odel(Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:38 | exceptional return of Mongoos ... odel(Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:44 | Mongoos ... ).count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:2:82:51 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:11:82:26 | createConnection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:28:82:28 | X | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:31:82:35 | model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | CalleeFlexibleAccessPath | Mongoose.createConnection().model |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:37:82:37 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:40:82:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().model().count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:82:46:82:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:9 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:26 | Mongoos ... nection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:29 | exceptional return of Mongoos ... tion(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:36 | Mongoos ... .models | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:39 | Mongoos ... dels[Y] | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:45 | Mongoos ... ].count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:2:83:52 | exceptional return of Mongoos ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:11:83:26 | createConnection | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | CalleeFlexibleAccessPath | Mongoose.createConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:28:83:28 | X | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:31:83:36 | models | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:38:83:38 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:41:83:45 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | CalleeFlexibleAccessPath | Mongoose.createConnection().models.?.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:83:47:83:51 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:2:85:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:11:85:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:19:85:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:21 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | (err, r ... (query) | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:22:85:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:23:85:25 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:28:85:30 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:38 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:44 | res.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | exceptional return of res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:36:85:51 | res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:40:85:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | CalleeFlexibleAccessPath | res.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:85:46:85:50 | query | receiverName | res |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:2:86:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:11:86:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:19:86:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:21 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | (err, r ... (query) | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:22:86:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:23:86:25 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:28:86:30 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:38 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:44 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:36:86:51 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:40:86:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:86:46:86:50 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:25 | Documen ... X).exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:2:87:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:11:87:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:19:87:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:22:87:25 | exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:26 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne().exec |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:27:87:56 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:28:87:30 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:33:87:35 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:43 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:49 | res.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | exceptional return of res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:41:87:56 | res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:45:87:49 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | CalleeFlexibleAccessPath | res.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:87:51:87:55 | query | receiverName | res |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:25 | Documen ... X).exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:2:88:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:11:88:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:19:88:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:22:88:25 | exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:26 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.findOne().exec |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:27:88:56 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:28:88:30 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:33:88:35 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:43 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:49 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:41:88:56 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:45:88:49 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:88:51:88:55 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:25 | Documen ... X).then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:2:89:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:11:89:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:19:89:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:22:89:25 | then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:26 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | CalleeFlexibleAccessPath | Document.findOne().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | (res) = ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:27:89:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:28:89:30 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:38 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:44 | res.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | exceptional return of res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:36:89:51 | res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:40:89:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | CalleeFlexibleAccessPath | res.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:89:46:89:50 | query | receiverName | res |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:20 | exceptional return of Document.findOne(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:25 | Documen ... X).then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:2:90:55 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:11:90:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:19:90:19 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:22:90:25 | then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | CalleeFlexibleAccessPath | Document.findOne().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:27:90:27 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:29 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | CalleeFlexibleAccessPath | Document.findOne().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | (err) = ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:30:90:54 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:31:90:33 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:41 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:47 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:39:90:54 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:43:90:47 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:90:49:90:53 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:2:92:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:11:92:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:16:92:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:18 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | (err, r ... (query) | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:19:92:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:20:92:22 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:25:92:27 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:35 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:38 | res[i] | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:44 | res[i].count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:33:92:51 | res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:37:92:37 | i | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:40:92:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | CalleeFlexibleAccessPath | res.?.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:92:46:92:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:2:93:49 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:11:93:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:16:93:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:18 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | (err, r ... (query) | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:19:93:48 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:20:93:22 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:25:93:27 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:35 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:41 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:33:93:48 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:37:93:41 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:93:43:93:47 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:22 | Documen ... X).exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:2:94:57 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:11:94:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:16:94:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:19:94:22 | exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:23 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find().exec |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:24:94:56 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:25:94:27 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:30:94:32 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:40 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:43 | res[i] | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:49 | res[i].count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:38:94:56 | res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:42:94:42 | i | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:45:94:49 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | CalleeFlexibleAccessPath | res.?.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:94:51:94:55 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:22 | Documen ... X).exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:2:95:54 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:11:95:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:16:95:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:19:95:22 | exec | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:23 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.find().exec |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:24:95:53 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:25:95:27 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:30:95:32 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:40 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:46 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:38:95:53 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:42:95:46 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:95:48:95:52 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:22 | Documen ... X).then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:2:96:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:11:96:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:16:96:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:19:96:22 | then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:23 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | CalleeFlexibleAccessPath | Document.find().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | (res) = ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:24:96:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:25:96:27 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:35 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:38 | res[i] | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:44 | res[i].count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | exceptional return of res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:33:96:51 | res[i].count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:37:96:37 | i | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:40:96:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | CalleeFlexibleAccessPath | res.?.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | contextSurroundingFunctionParameters | (req, res)\n(res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:96:46:96:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:17 | exceptional return of Document.find(X) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:22 | Documen ... X).then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:2:97:52 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:11:97:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:16:97:16 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:19:97:22 | then | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | CalleeFlexibleAccessPath | Document.find().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:24:97:24 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:26 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | CalleeFlexibleAccessPath | Document.find().then |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | (err) = ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:27:97:51 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:28:97:30 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:38 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:44 | err.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:36:97:51 | exceptional return of err.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:40:97:44 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | CalleeFlexibleAccessPath | err.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:97:46:97:50 | query | receiverName | err |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:15 | Document.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:2:99:50 | exceptional return of Documen ... query)) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:11:99:15 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | CalleeFlexibleAccessPath | Document.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:17:99:17 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:19 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | CalleeFlexibleAccessPath | Document.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | (err, r ... (query) | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:20:99:49 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:21:99:23 | err | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:26:99:28 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:36 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:42 | res.count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | exceptional return of res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:34:99:49 | res.count(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:38:99:42 | count | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | CalleeFlexibleAccessPath | res.count |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:99:44:99:48 | query | receiverName | res |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:101:1 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | 'arguments' object of function innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | exceptional return of function innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | functio ... t");\\n\\t} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:2:103:2 | return of function innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:11:101:18 | innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:20:101:20 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:23:101:23 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:101:26:101:30 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | exceptional return of new Mon ... stant") | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:10:102:63 | new Mon ... stant") | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:21 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:14:102:27 | Mongoose.Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:23:102:27 | Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:29:102:38 | "constant" | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:41:102:50 | "constant" | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | CalleeFlexibleAccessPath | Mongoose.Query |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | contextSurroundingFunctionParameters | (X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:102:53:102:62 | "constant" | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ...  query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | exceptional return of new inn ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ...  query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ...  query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ...  query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:2:104:26 | new inn ...  query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:6:104:13 | innocent | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | CalleeFlexibleAccessPath | innocent |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:15:104:15 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | CalleeFlexibleAccessPath | innocent |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:18:104:18 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | CalleeFlexibleAccessPath | innocent |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:104:21:104:25 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:106:1 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | 'arguments' object of function getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | exceptional return of function getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | functio ... ery;\\n\\t} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:2:108:2 | return of function getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:106:11:106:29 | getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:17 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:10:107:23 | Mongoose.Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:107:19:107:23 | Query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:6 | C | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:6:110:30 | C = get ... uctor() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:28 | getQueryConstructor | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | exceptional return of getQuer ... uctor() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:110:10:110:30 | getQuer ... uctor() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | exceptional return of new C(X, Y, query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:2:111:19 | new C(X, Y, query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:6:111:6 | C | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | CalleeFlexibleAccessPath | C |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:8:111:8 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | CalleeFlexibleAccessPath | C |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:11:111:11 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | CalleeFlexibleAccessPath | C |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:111:14:111:18 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:26 | Documen ... dUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | Documen ... () { }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:2:113:53 | exceptional return of Documen ... () { }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:11:113:26 | findOneAndUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:28:113:28 | X | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:31:113:35 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:37 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | function () { } | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:113:38:113:52 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:7 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:6:115:22 | id = req.query.id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:13 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:19 | req.query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:11:115:22 | req.query.id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:15:115:19 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:21:115:22 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:28 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond =  ... ry.cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond =  ... ry.cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond =  ... ry.cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:25:115:45 | cond =  ... ry.cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:34 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:40 | req.query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:32:115:45 | req.query.cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:36:115:40 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:115:42:115:45 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:20 | Document.deleteMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | Documen ... y(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:2:116:26 | exceptional return of Documen ... y(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:11:116:20 | deleteMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | CalleeFlexibleAccessPath | Document.deleteMany |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:116:22:116:25 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:19 | Document.deleteOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:2:117:25 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:11:117:19 | deleteOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | CalleeFlexibleAccessPath | Document.deleteOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:117:21:117:24 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:19 | Document.geoSearch | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | Documen ... h(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:2:118:25 | exceptional return of Documen ... h(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:11:118:19 | geoSearch | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | CalleeFlexibleAccessPath | Document.geoSearch |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:118:21:118:24 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:16 | Document.remove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:2:119:22 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:11:119:16 | remove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | CalleeFlexibleAccessPath | Document.remove |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:119:18:119:21 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:20 | Document.replaceOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:2:120:29 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:11:120:20 | replaceOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | CalleeFlexibleAccessPath | Document.replaceOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:22:120:25 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | CalleeFlexibleAccessPath | Document.replaceOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:120:28:120:28 | Y | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | Document.find(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:2:121:20 | exceptional return of Document.find(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:11:121:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:121:16:121:19 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:17 | Document.findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:2:122:23 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:11:122:17 | findOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | CalleeFlexibleAccessPath | Document.findOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:122:19:122:22 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:18 | Document.findById | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | Documen ... yId(id) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:2:123:22 | exceptional return of Documen ... yId(id) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:11:123:18 | findById | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | CalleeFlexibleAccessPath | Document.findById |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:123:20:123:21 | id | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:26 | Documen ... dDelete | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:2:124:32 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:11:124:26 | findOneAndDelete | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndDelete |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:124:28:124:31 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:26 | Documen ... dRemove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:2:125:32 | exceptional return of Documen ... e(cond) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:11:125:26 | findOneAndRemove | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndRemove |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:125:28:125:31 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:26 | Documen ... dUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:2:126:35 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:11:126:26 | findOneAndUpdate | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:28:126:31 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | CalleeFlexibleAccessPath | Document.findOneAndUpdate |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:126:34:126:34 | Y | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:16 | Document.update | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:2:127:25 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:11:127:16 | update | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | CalleeFlexibleAccessPath | Document.update |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:18:127:21 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | CalleeFlexibleAccessPath | Document.update |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:127:24:127:24 | Y | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:20 | Document.updateMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:2:128:29 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:11:128:20 | updateMany | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | CalleeFlexibleAccessPath | Document.updateMany |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:22:128:25 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | CalleeFlexibleAccessPath | Document.updateMany |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:128:28:128:28 | Y | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:19 | Document.updateOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:2:129:28 | exceptional return of Documen ... ond, Y) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:11:129:19 | updateOne | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | CalleeFlexibleAccessPath | Document.updateOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:21:129:24 | cond | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | CalleeFlexibleAccessPath | Document.updateOne |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:129:27:129:27 | Y | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | Documen ... : id }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:2:130:27 | exceptional return of Documen ... : id }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:11:130:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:16:130:26 | { _id: id } | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:20 | _id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:18:130:24 | _id: id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | InputAccessPathFromCallee | 0._id |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | assignedToPropName | _id |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:130:23:130:24 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:9 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:14 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | Documen ... id } }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:2:131:36 | exceptional return of Documen ... id } }) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:11:131:14 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:16:131:35 | { _id: { $eq: id } } | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:20 | _id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:18:131:33 | _id: { $eq: id } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | InputAccessPathFromCallee | 0._id |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | assignedToPropName | _id |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:23:131:33 | { $eq: id } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:27 | $eq | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:25:131:31 | $eq: id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | InputAccessPathFromCallee | 0._id.$eq |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | assignedToPropName | $eq |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | contextFunctionInterfaces | getQueryConstructor()\ninnocent(X, Y, query) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongoose.js:131:30:131:31 | id | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:0 | this | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:1 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:1:1:1:12 | 'use strict' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:13 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:7:2:34 | Express ... press') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:23 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | exceptional return of require('express') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:17:2:34 | require('express') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:2:25:2:33 | 'express' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:16 | BodyParser | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:7:3:41 | BodyPar ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:26 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | exceptional return of require ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:20:3:41 | require ... arser') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:3:28:3:40 | 'body-parser' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:14 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoos ... goose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:7:4:36 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:24 | require | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | exceptional return of require('mongoose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:18:4:36 | require('mongoose') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:4:26:4:35 | 'mongoose' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:8 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:16 | Mongoose.Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:1:5:33 | Mongoos ... Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:10:5:16 | Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:25 | global | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | assignedToPropName | Promise |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:20:5:33 | global.Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:5:27:5:33 | Promise | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:8 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:16 | Mongoose.connect | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | Mongoos ... able1') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:1:6:51 | exceptional return of Mongoos ... able1') | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:10:6:16 | connect | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | CalleeFlexibleAccessPath | Mongoose.connect |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:6:18:6:50 | 'mongod ... table1' | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:9 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:7:8:21 | app = Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:19 | Express | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:8:13:8:21 | exceptional return of Express() | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:10:14 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Documen ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:7:16:2 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:25 | Mongoose | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:10:31 | Mongoose.model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | Mongoos ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:18:16:2 | exceptional return of Mongoos ... ring\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:27:10:31 | model | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:33:10:42 | 'Document' | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:10:45:16:1 | {\\n    t ... tring\\n} | receiverName | Mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:11:9 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:5:14:5 | title:  ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | InputAccessPathFromCallee | 1.title |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:11:12:14:5 | {\\n      ... e\\n    } | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:12 | type | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:9:12:20 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | InputAccessPathFromCallee | 1.title.type |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:12:15:12:20 | String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:14 | unique | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:9:13:20 | unique: true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | InputAccessPathFromCallee | 1.title.unique |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | assignedToPropName | unique |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:13:17:13:20 | true | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:8 | type | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:5:15:16 | type: String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | CalleeFlexibleAccessPath | Mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | InputAccessPathFromCallee | 1.type |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | assignedToPropName | type |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:15:11:15:16 | String | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:3 | app | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:18:7 | app.get | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | app.get ... ry);\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:1:24:2 | exceptional return of app.get ... ry);\\n}) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:5:18:7 | get | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:9:18:25 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:18:27 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | 'arguments' object of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | (req, r ... ery);\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | exceptional return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:28:24:1 | return of anonymous function | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:29:18:31 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:18:34:18:36 | res | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:15 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:11:19:20 | query = {} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:19:19:19:20 | {} | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:9 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:15 | query.title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:5:20:50 | query.t ... ).title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:11:20:15 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:22 | JSON | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:28 | JSON.parse | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | JSON.pa ... y.data) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:44 | exceptional return of JSON.pa ... y.data) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:19:20:50 | JSON.pa ... ).title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:24:20:28 | parse | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:32 | req | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:38 | req.query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:30:20:43 | req.query.data | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:34:20:38 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:40:20:43 | data | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:20:46:20:50 | title | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:12 | Document | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:17 | Document.find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | Document.find(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:5:23:24 | exceptional return of Document.find(query) | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:14:23:17 | find | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | CalleeFlexibleAccessPath | Document.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | enclosingFunctionBody | req res query query title JSON parse req query data title Document find query |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | fileImports | body-parser express mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseJsonParse.js:23:19:23:23 | query | receiverName | Document |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:0 | this | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import  ... goose'; | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import  ... goose'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:1:1:32 | import  ... goose'; | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:8:1:15 | mongoose | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:1:22:1:31 | 'mongoose' | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:20 | MyModel | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:14:3:61 | MyModel ... hema()) | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:31 | mongoose | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:37 | mongoose.model | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | exceptional return of mongoos ... hema()) | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:24:3:61 | mongoos ... hema()) | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:33:3:37 | model | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | CalleeFlexibleAccessPath | mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:39:3:47 | 'MyModel' | receiverName | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:58 | getSchema | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | exceptional return of getSchema() | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | CalleeFlexibleAccessPath | mongoose.model |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | calleeImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | fileImports | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModel.js:3:50:3:60 | getSchema() | receiverName | mongoose |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:0 | this | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:1 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import  ... Model'; | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import  ... Model'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:1:1:42 | import  ... Model'; | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:10:1:16 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:1:25:1:41 | './mongooseModel' | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import  ... press'; | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import  ... press'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:1:2:30 | import  ... press'; | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:8:2:14 | express | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:2:21:2:29 | 'express' | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import  ... arser'; | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import  ... arser'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:1:3:37 | import  ... arser'; | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:8:3:17 | bodyParser | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:3:24:3:36 | 'body-parser' | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:7 | app | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:5:5:19 | app = express() | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:17 | express | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | exceptional return of express() | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:5:11:5:19 | express() | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:3 | app | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:7 | app.use | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | app.use ... json()) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:1:7:26 | exceptional return of app.use ... json()) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:5:7:7 | use | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:18 | bodyParser | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:23 | bodyParser.json | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | bodyParser.json() | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:9:7:25 | exceptional return of bodyParser.json() | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:7:20:7:23 | json | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:3 | app | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:9:8 | app.post | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | app.pos ... / OK\\n}) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:1:14:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:5:9:8 | post | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:10:9:16 | '/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:9:18 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | 'arguments' object of anonymous function | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | exceptional return of anonymous function | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:19:14:1 | return of anonymous function | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:20:9:22 | req | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:9:25:9:27 | res | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:7 | v | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:7:10:32 | v = JSO ... body.x) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:14 | JSON | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:20 | JSON.parse | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | JSON.pa ... body.x) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:11:10:32 | exceptional return of JSON.pa ... body.x) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:16:10:20 | parse | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:24 | req | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:29 | req.body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:22:10:31 | req.body.x | receiverName | JSON |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:26:10:29 | body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:10:31:10:31 | x | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:9 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:14 | MyModel.find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | MyModel ... d: v }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:3:11:25 | exceptional return of MyModel ... d: v }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:11:11:14 | find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:16:11:24 | { id: v } | receiverName | MyModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:19 | id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:18:11:22 | id: v | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:11:22:11:22 | v | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:9 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:14 | MyModel.find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | MyModel ... y.id }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:3:12:35 | exceptional return of MyModel ... y.id }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:11:12:14 | find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:16:12:34 | { id: req.body.id } | receiverName | MyModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:19 | id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:18:12:32 | id: req.body.id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:24 | req | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:29 | req.body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:22:12:32 | req.body.id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:26:12:29 | body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:12:31:12:32 | id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:9 | MyModel | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:14 | MyModel.find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | MyModel ... id}` }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:3:13:40 | exceptional return of MyModel ... id}` }) | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:11:13:14 | find | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:16:13:39 | { id: ` ... .id}` } | receiverName | MyModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:19 | id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:18:13:37 | id: `${req.body.id}` | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | CalleeFlexibleAccessPath | MyModel.find |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | InputAccessPathFromCallee | 0.id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | calleeImports | ./mongooseModel |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:22:13:37 | `${req.body.id}` | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:27 | req | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:32 | req.body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:25:13:35 | req.body.id | stringConcatenatedWith |  -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:29:13:32 | body | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | enclosingFunctionBody | req res v JSON parse req body x MyModel find id v MyModel find id req body id MyModel find id req body id |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/mongooseModelClient.js:13:34:13:35 | id | fileImports | ./mongooseModel body-parser express |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:0 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:1:1:1 | require | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:9 | app | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:7:1:32 | app = r ... ess")() | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:19 | require | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | exceptional return of require("express") | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:30 | require("express") | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | exceptional return of require("express")() | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:13:1:32 | require("express")() | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:1:21:1:29 | "express" | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:11 | mysql | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:7:2:30 | mysql = ... mysql') | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:21 | require | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | exceptional return of require('mysql') | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:15:2:30 | require('mysql') | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:2:23:2:29 | 'mysql' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:10 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool =  ... nfig()) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool =  ... nfig()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:7:3:42 | pool =  ... nfig()) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:18 | mysql | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:29 | mysql.createPool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | exceptional return of mysql.c ... nfig()) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:14:3:42 | mysql.c ... nfig()) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:20:3:29 | createPool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:39 | getConfig | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | exceptional return of getConfig() | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | CalleeFlexibleAccessPath | mysql.createPool |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | calleeImports | mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:3:31:3:41 | getConfig() | receiverName | mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:3 | app | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:5:7 | app.get | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ...  });\\n}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | app.get ...  });\\n}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:1:22:2 | exceptional return of app.get ...  });\\n}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:5:5:7 | get | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:9:5:16 | "search" | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:18 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:5:19 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | 'arguments' object of function handler | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | exceptional return of function handler | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | functio ...   });\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:19:22:1 | return of function handler | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:28:5:34 | handler | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:36:5:38 | req | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:5:41:5:43 | res | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:12 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp =  ... s.value | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp =  ... s.value | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp =  ... s.value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp =  ... s.value | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:9:6:31 | temp =  ... s.value | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:18 | req | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:25 | req.params | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:16:6:31 | req.params.value | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:20:6:25 | params | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:6:27:6:31 | value | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:8 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:7:22 | pool.getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | exceptional return of pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:5:12:6 | pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:10:7:22 | getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:7:23 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | pool.getConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | calleeImports | mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | functio ... ;\\n    } | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:24:12:5 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:33:7:35 | err | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:7:38:7:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:18 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:8:24 | connection.query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:9:11:47 | exceptional return of connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:20:8:24 | query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:8:26:11:9 | {\\n      ...       } | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:15 | sql | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:13:9:59 | sql: 'S ... r` = ?' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | InputAccessPathFromCallee | 0.sql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | assignedToPropName | sql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:9:18:9:59 | 'SELECT ... r` = ?' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:18 | values | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:13:10:26 | values: [temp] | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:21:10:26 | [temp] | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:10:22:10:25 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:11 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | functio ... lds) {} | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:12:11:46 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:21:11:25 | error | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:28:11:34 | results | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:11:37:11:42 | fields | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:8 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:13:22 | pool.getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | exceptional return of pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:5:17:6 | pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:10:13:22 | getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:13:23 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | pool.getConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | calleeImports | mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | functio ... ;\\n    } | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:24:17:5 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:33:13:35 | err | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:13:38:13:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:18 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:14:24 | connection.query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:9:16:47 | exceptional return of connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:20:14:24 | query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:14:26:16:9 | {\\n      ...       } | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:15 | sql | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:13:15:65 | sql: 'S ...  + temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:58 | 'SELECT ... or` = ' | stringConcatenatedWith |  -endpoint- temp |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | InputAccessPathFromCallee | 0.sql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | assignedToPropName | sql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:18:15:65 | 'SELECT ...  + temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:15:62:15:65 | temp | stringConcatenatedWith | 'SELECT * FROM `books` WHERE `author` = ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:11 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | functio ... lds) {} | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:12:16:46 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:21:16:25 | error | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:28:16:34 | results | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:16:37:16:42 | fields | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:8 | pool | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:18:22 | pool.getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | exceptional return of pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n    }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n    }) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n    }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:5:21:6 | pool.ge ... \\n    }) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:10:18:22 | getConnection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:18:23 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | pool.getConnection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | calleeImports | mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | functio ... ;\\n    } | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:24:21:5 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:33:18:35 | err | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:18:38:18:47 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:18 | connection | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:19:24 | connection.query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:9:20:48 | exceptional return of connect ... ds) {}) | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:20:19:24 | query | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:66 | 'SELECT ... or` = ' | stringConcatenatedWith |  -endpoint- temp |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:26:19:73 | 'SELECT ...  + temp | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | contextSurroundingFunctionParameters | (req, res)\n(err, connection) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:19:70:19:73 | temp | stringConcatenatedWith | 'SELECT * FROM `books` WHERE `author` = ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:12 | this | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | 'arguments' object of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | exceptional return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | CalleeFlexibleAccessPath | connection.query |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | functio ... lds) {} | receiverName | connection |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:13:20:47 | return of anonymous function | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:22:20:26 | error | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:29:20:35 | results | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, connection)\n(error, results, fields) |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | enclosingFunctionBody | req res temp req params value pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` = ? values temp error results fields pool getConnection err connection connection query sql SELECT * FROM `books` WHERE `author` =  temp error results fields pool getConnection err connection connection query SELECT * FROM `books` WHERE `author` =  temp error results fields |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/mysql.js:20:38:20:43 | fields | fileImports | express mysql |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:0 | this | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:1 | require | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import  ... omise"; | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import  ... omise"; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:1:1:39 | import  ... omise"; | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:10:1:18 | IDatabase | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:1:27:1:38 | "pg-promise" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n  }\\n} | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:8:11:1 | class F ... ;\\n  }\\n} | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:14:3:16 | Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | 'arguments' object of default constructor of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | assignedToPropName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | () {} | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | constructor() {} | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | exceptional return of default constructor of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | return of default constructor of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:3:18:3:17 | this | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | contextSurroundingFunctionParameters | () |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | enclosingFunctionName | constructor |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:4:3:4:16 | db: IDatabase; | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:2 | this | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:6:11 | onRequest | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | 'arguments' object of method onRequest of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | exceptional return of method onRequest of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | assignedToPropName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | onReque ... ();\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:3:10:3 | return of method onRequest of class Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:13:6:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:6:18:6:20 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:13 | taint | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:9:7:28 | taint = req.params.x | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:19 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:26 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:17:7:28 | req.params.x | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:21:7:26 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:7:28:7:28 | x | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:8 | this | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:11 | this.db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:15 | this.db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | exceptional return of this.db.one(taint) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:5:8:22 | this.db.one(taint) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:10:8:11 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:13:8:15 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | CalleeFlexibleAccessPath | this.db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:8:17:8:21 | taint | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:7 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:11 | res.end | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | exceptional return of res.end() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:5:9:13 | res.end() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | enclosingFunctionBody | req res taint req params x db one taint res end |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | enclosingFunctionName | onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:9:9:9:11 | end | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:7 | require | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | exceptional return of require('express') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:18 | require('express') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | exceptional return of require('express')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:20 | require('express')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:24 | require ... )().get | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | exceptional return of require ... , res)) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:1:13:77 | require ... , res)) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:9:13:17 | 'express' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:22:13:24 | get | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:26:13:31 | '/foo' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:33 | Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | 'arguments' object of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | (req, r ... q, res) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | exceptional return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:34:13:76 | return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:35:13:37 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:40:13:42 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | exceptional return of new Foo() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:56 | new Foo() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:66 | new Foo().onRequest | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | exceptional return of new Foo ... q, res) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:48:13:76 | new Foo ... q, res) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:52:13:54 | Foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:58:13:66 | onRequest | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | CalleeFlexibleAccessPath | Foo().onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:68:13:70 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | CalleeFlexibleAccessPath | Foo().onRequest |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | contextFunctionInterfaces | constructor()\nonRequest(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | enclosingFunctionBody | req res Foo onRequest req res |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise-types.ts:13:73:13:75 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:0 | this | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | pgp | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:1:1:1 | require | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:9 | pgp | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:7:1:35 | pgp = r ... ise')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:19 | require | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | exceptional return of require ... omise') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:33 | require ... omise') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | exceptional return of require ... ise')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:13:1:35 | require ... ise')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:1:21:1:32 | 'pg-promise' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:7 | require | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | exceptional return of require('express') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:18 | require('express') | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | exceptional return of require('express')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:20 | require('express')() | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:3:24 | require ... )().get | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ...   );\\n}) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ...   );\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | exceptional return of require ...   );\\n}) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ...   );\\n}) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ...   );\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:1:66:2 | require ...   );\\n}) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:9:3:17 | 'express' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:22:3:24 | get | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:26:3:31 | '/foo' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:33 | pgp | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:3:34 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | 'arguments' object of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | (req, r ... \\n  );\\n} | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | exceptional return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:34:66:1 | return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:35:3:37 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:3:40:3:42 | res | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:10 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:9:4:53 | db = pg ... RING']) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:16 | pgp | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | exceptional return of pgp(pro ... RING']) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:14:4:53 | pgp(pro ... RING']) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:24 | process | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:28 | process.env | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | CalleeFlexibleAccessPath | pgp |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:18:4:52 | process ... TRING'] | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:26:4:28 | env | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:4:30:4:51 | 'DB_CON ... STRING' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:6:11 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ...  PRICE" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ...  PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ...  PRICE" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:7:7:55 | query = ...  PRICE" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:6:68 | "SELECT ... GORY='" | stringConcatenatedWith |  -endpoint- req.params.category + '' ORDER BY PRICE' |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:34 | "SELECT ... ategory | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ...  PRICE" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ...  PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ...  PRICE" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:6:15:7:55 | "SELECT ...  PRICE" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:18 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:25 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:16:7:34 | req.params.category | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' -endpoint- '' ORDER BY PRICE' |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:20:7:25 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:27:7:34 | category | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:7:38:7:55 | "' ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' + req.params.category -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:8 | db.any | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | db.any(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:3:9:15 | exceptional return of db.any(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:6:9:8 | any | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | CalleeFlexibleAccessPath | db.any |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:9:10:9:14 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:9 | db.many | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | db.many(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:3:10:16 | exceptional return of db.many(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:6:10:9 | many | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | CalleeFlexibleAccessPath | db.many |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:10:11:10:15 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:15 | db.manyOrNone | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | db.manyOrNone(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:3:11:22 | exceptional return of db.manyOrNone(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:6:11:15 | manyOrNone | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | CalleeFlexibleAccessPath | db.manyOrNone |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:11:17:11:21 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:8 | db.map | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | db.map(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:3:12:15 | exceptional return of db.map(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:6:12:8 | map | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | CalleeFlexibleAccessPath | db.map |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:12:10:12:14 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:10 | db.multi | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | db.multi(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:3:13:17 | exceptional return of db.multi(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:6:13:10 | multi | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | CalleeFlexibleAccessPath | db.multi |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:13:12:13:16 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:16 | db.multiResult | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | db.mult ... (query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:3:14:23 | exceptional return of db.mult ... (query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:6:14:16 | multiResult | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | CalleeFlexibleAccessPath | db.multiResult |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:14:18:14:22 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:9 | db.none | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | db.none(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:3:15:16 | exceptional return of db.none(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:6:15:9 | none | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | CalleeFlexibleAccessPath | db.none |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:15:11:15:15 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | db.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:3:16:15 | exceptional return of db.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:6:16:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:16:10:16:14 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:14 | db.oneOrNone | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | db.oneOrNone(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:3:17:21 | exceptional return of db.oneOrNone(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:6:17:14 | oneOrNone | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | CalleeFlexibleAccessPath | db.oneOrNone |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:17:16:17:20 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:10 | db.query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | db.query(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:3:18:17 | exceptional return of db.query(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:6:18:10 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | CalleeFlexibleAccessPath | db.query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:18:12:18:16 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:11 | db.result | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | db.result(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:3:19:18 | exceptional return of db.result(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:6:19:11 | result | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | CalleeFlexibleAccessPath | db.result |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:19:13:19:17 | query | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:21:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:3:23:4 | exceptional return of db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:6:21:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:21:10:23:3 | {\\n    t ...  OK\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:5:22:15 | text: query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:22:11:22:15 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:24:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:3:27:4 | exceptional return of db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:6:24:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:24:10:27:3 | {\\n    t ...  OK\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:5:25:44 | text: ' ... d = $1' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:25:11:25:44 | 'SELECT ... d = $1' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:5:26:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:22 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:13:26:25 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:17:26:22 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:26:24:26:25 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:28:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | db.one( ... er\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:3:31:4 | exceptional return of db.one( ... er\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:6:28:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:28:10:31:3 | {\\n    t ... ter\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:5:29:48 | text: ' ... $1:raw' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:29:11:29:48 | 'SELECT ... $1:raw' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:5:30:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:22 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:13:30:25 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:17:30:22 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:30:24:30:25 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:32:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:3:35:4 | exceptional return of db.one( ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:6:32:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:32:10:35:3 | {\\n    t ...  OK\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:5:33:45 | text: ' ...  = $1^' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:33:11:33:45 | 'SELECT ...  = $1^' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:5:34:25 | values: ... rams.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:22 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:13:34:25 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:17:34:22 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:34:24:34:25 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:36:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ...  ]\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ...  ]\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ...  ]\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ...  ]\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | db.one( ...  ]\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ...  ]\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ...  ]\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ...  ]\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ...  ]\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:3:43:4 | exceptional return of db.one( ...  ]\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:6:36:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:36:10:43:3 | {\\n    t ...   ]\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:5:37:79 | text: ' ... o = $3' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:37:11:37:79 | 'SELECT ... o = $3' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:38:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:5:42:5 | values: ... n\\n    ] | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:38:13:42:5 | [\\n      ... n\\n    ] | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:9 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:16 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:7:39:19 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:11:39:16 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:39:18:39:19 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:9 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:16 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:7:40:21 | req.params.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:11:40:16 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:40:18:40:21 | name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:9 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:16 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:7:41:20 | req.params.foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:11:41:16 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:41:18:41:20 | foo | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:44:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ...  }\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ...  }\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ...  }\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ...  }\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | db.one( ...  }\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ...  }\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ...  }\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ...  }\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ...  }\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:3:50:4 | exceptional return of db.one( ...  }\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:6:44:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:44:10:50:3 | {\\n    t ...   }\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:5:45:70 | text: ' ... {name}' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:45:11:45:70 | 'SELECT ... {name}' | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:46:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:5:49:5 | values: ... n\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:46:13:49:5 | {\\n      ... n\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:8 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:7:47:23 | id: req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:13 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:20 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | InputAccessPathFromCallee | 0.values.id |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:11:47:23 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:15:47:20 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:47:22:47:23 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:10 | name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:7:48:27 | name: r ... ms.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:22 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | InputAccessPathFromCallee | 0.values.name |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | assignedToPropName | name |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:13:48:27 | req.params.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:17:48:22 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:48:24:48:27 | name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:51:8 | db.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ...  }\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ...  }\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ...  }\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ...  }\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | db.one( ...  }\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ...  }\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ...  }\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ...  }\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ...  }\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:3:58:4 | exceptional return of db.one( ...  }\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:6:51:8 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:51:10:58:3 | {\\n    t ...   }\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:8 | text | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:5:52:121 | text: " ... lue%\\"" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | InputAccessPathFromCallee | 0.text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | assignedToPropName | text |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:52:11:52:121 | "SELECT ... lue%\\"" | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:53:10 | values | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:5:57:5 | values: ... e\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | InputAccessPathFromCallee | 0.values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | assignedToPropName | values |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:53:13:57:5 | {\\n      ... e\\n    } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:8 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:7:54:23 | id: req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:13 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:20 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | InputAccessPathFromCallee | 0.values.id |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | assignedToPropName | id |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:11:54:23 | req.params.id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:15:54:20 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:54:22:54:23 | id | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:10 | name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:7:55:27 | name: r ... ms.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:15 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:22 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | InputAccessPathFromCallee | 0.values.name |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | assignedToPropName | name |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:13:55:27 | req.params.name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:17:55:22 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:55:24:55:27 | name | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:11 | title | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:7:56:29 | title:  ... s.title | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:16 | req | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:23 | req.params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | CalleeFlexibleAccessPath | db.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | InputAccessPathFromCallee | 0.values.title |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | assignedToPropName | title |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:14:56:29 | req.params.title | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:18:56:23 | params | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:56:25:56:29 | title | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:59:9 | db.task | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | db.task ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n  }) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n  }) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n  }) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:3:61:4 | exceptional return of db.task ... OK\\n  }) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:6:59:9 | task | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:10 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:59:11 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | 'arguments' object of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | exceptional return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | CalleeFlexibleAccessPath | db.task |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:59:11:61:3 | t => {\\n ...  OK\\n  } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:14 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:18 | t.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | exceptional return of t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:14:60:25 | t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:16:60:18 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | CalleeFlexibleAccessPath | t.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:60:20:60:24 | query | receiverName | t |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:4 | db | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:62:11 | db.taskIf | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ...  OK\\n  ) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ...  OK\\n  ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ...  OK\\n  ) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ...  OK\\n  ) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | db.task ...  OK\\n  ) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ...  OK\\n  ) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ...  OK\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ...  OK\\n  ) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ...  OK\\n  ) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:3:65:3 | exceptional return of db.task ...  OK\\n  ) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:62:6:62:11 | taskIf | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | CalleeFlexibleAccessPath | db.taskIf |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:5:63:30 | { cnd:  ... uery) } | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:9 | cnd | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:7:63:28 | cnd: t  ... (query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:11 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:12 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | 'arguments' object of method cnd | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | exceptional return of method cnd | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | return of method cnd | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | CalleeFlexibleAccessPath | db.taskIf |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | InputAccessPathFromCallee | 0.cnd |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | assignedToPropName | cnd |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:12:63:28 | t => t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:17 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:21 | t.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | exceptional return of t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:17:63:28 | t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:19:63:21 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | CalleeFlexibleAccessPath | t.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:63:23:63:27 | query | receiverName | t |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:4 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:5 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | 'arguments' object of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | exceptional return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | return of anonymous function | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | CalleeFlexibleAccessPath | db.taskIf |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | calleeImports | pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:5:64:21 | t => t.one(query) | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:10 | t | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:14 | t.one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | exceptional return of t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:10:64:21 | t.one(query) | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:12:64:14 | one | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | CalleeFlexibleAccessPath | t.one |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | contextFunctionInterfaces | cnd(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | contextSurroundingFunctionParameters | (req, res)\n(t) |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | enclosingFunctionBody | req res db pgp process DB_CONNECTION_STRING env DB_CONNECTION_STRING query SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE db any query db many query db manyOrNone query db map query db multi query db multiResult query db none query db one query db oneOrNone query db query query db result query db one text query db one text SELECT * FROM news where id = $1 values req params id db one text SELECT * FROM news where id = $1:raw values req params id db one text SELECT * FROM news where id = $1^ values req params id db one text SELECT * FROM news where id = $1:raw AND name = $2:raw AND foo = $3 values req params id req params name req params foo db one text SELECT * FROM news where id = ${id}:raw AND name = ${name} values id req params id name req params name db one text SELECT * FROM news where id = ${id}:value AND name LIKE '%${name}:value%' AND title LIKE "%${title}:value%" values id req params id name req params name title req params title db task t t one query db taskIf cnd t t one query t t one query |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | fileImports | express pg-promise |
| autogenerated/NosqlAndSqlInjection/untyped/pg-promise.js:64:16:64:20 | query | receiverName | t |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:0 | this | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:1:1:1:1 | require | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:11 | redis | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:7:2:30 | redis = ... redis") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:21 | require | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | exceptional return of require("redis") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:15:2:30 | require("redis") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:2:23:2:29 | "redis" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:12 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client  ... lient() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client  ... lient() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:7:3:35 | client  ... lient() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:20 | redis | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:33 | redis.createClient | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | exceptional return of redis.createClient() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:16:3:35 | redis.createClient() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:3:22:3:33 | createClient | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:13 | Express | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:7:5:34 | Express ... press') | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:23 | require | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | exceptional return of require('express') | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:17:5:34 | require('express') | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:5:25:5:33 | 'express' | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:9 | app | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:7:6:21 | app = Express() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:19 | Express | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | Express() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:6:13:6:21 | exceptional return of Express() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:3 | app | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:7 | app.use | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | app.use ... json()) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:1:7:38 | exceptional return of app.use ... json()) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:5:7:7 | use | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:15 | require | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | exceptional return of require ... arser') | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:30 | require ... arser') | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:35 | require ... ').json | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | exceptional return of require ... .json() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | CalleeFlexibleAccessPath | app.use |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:9:7:37 | require ... .json() | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:17:7:29 | 'body-parser' | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:7:32:7:35 | json | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:3 | app | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:9:8 | app.post | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | app.pos ... T OK\\n}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:1:33:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:5:9:8 | post | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:10:9:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:28 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:9:29 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | 'arguments' object of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | exceptional return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:29:33:1 | return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:30:9:32 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:9:35:9:37 | res | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:14 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:5:10:37 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:12:10:14 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:18 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:23 | req.body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:16:10:27 | req.body.key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:20:10:23 | body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:25:10:27 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:10:30:10:36 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:11 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:9:12:26 | key = req.body.key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:17 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:22 | req.body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:15:12:26 | req.body.key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:19:12:22 | body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:12:24:12:26 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:18 | typeof key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof  ... string" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof  ... string" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof  ... string" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof  ... string" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:9:13:31 | typeof  ... string" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:16:13:18 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:13:24:13:31 | "string" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:14 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:18 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:9:14:32 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:16:14:18 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:20:14:22 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:14:25:14:31 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:14 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:18 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | client. ... alue"]) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:9:15:36 | exceptional return of client. ... alue"]) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:16:15:18 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:20:15:35 | ["key", "value"] | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:21:15:25 | "key" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:15:28:15:34 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:5 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:14 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:5:18:28 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:12:18:14 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:16:18:18 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:18:21:18:27 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:16 | client.hmset | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | client. ... alue2") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:5:19:56 | exceptional return of client. ... alue2") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:12:19:16 | hmset | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | CalleeFlexibleAccessPath | client.hmset |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:18:19:22 | "key" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | CalleeFlexibleAccessPath | client.hmset |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:25:19:31 | "field" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | CalleeFlexibleAccessPath | client.hmset |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:34:19:40 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | CalleeFlexibleAccessPath | client.hmset |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | InputArgumentIndex | 3 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:43:19:45 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | CalleeFlexibleAccessPath | client.hmset |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | InputArgumentIndex | 4 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:19:48:19:55 | "value2" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:22:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ...  .multi | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ...  .multi | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ...  .multi | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ...  .multi | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:14 | client\\n ...  .multi | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | client\\n ... multi() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:23:16 | exceptional return of client\\n ... multi() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ...    .set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ...    .set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ...    .set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ...    .set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:12 | client\\n ...    .set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | client\\n ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:24:33 | exceptional return of client\\n ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ...    .set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ...    .set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ...    .set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ...    .set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:12 | client\\n ...    .set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | client\\n ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:25:26 | exceptional return of client\\n ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ...    .get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ...    .get | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ...    .get | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ...    .get | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:12 | client\\n ...    .get | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | client\\n ... et(key) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:26:17 | exceptional return of client\\n ... et(key) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ...   .exec | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ...   .exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ...   .exec | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ...   .exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:13 | client\\n ...   .exec | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | client\\n ... s) { }) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:22:5:27:42 | exceptional return of client\\n ... s) { }) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:23:10:23:14 | multi | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:10:24:12 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | CalleeFlexibleAccessPath | client.multi().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:14:24:23 | "constant" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | CalleeFlexibleAccessPath | client.multi().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:24:26:24:32 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:10:25:12 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | CalleeFlexibleAccessPath | client.multi().set().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:14:25:16 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | CalleeFlexibleAccessPath | client.multi().set().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:25:19:25:25 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:10:26:12 | get | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | CalleeFlexibleAccessPath | client.multi().set().set().get |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:26:14:26:16 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:10:27:13 | exec | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:14 | this | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | 'arguments' object of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | exceptional return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | CalleeFlexibleAccessPath | client.multi().set().set().get().exec |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | contextSurroundingFunctionParameters | (req, res)\n(err, replies) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | functio ... es) { } | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:15:27:41 | return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | contextSurroundingFunctionParameters | (req, res)\n(err, replies) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:25:27:27 | err | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | contextSurroundingFunctionParameters | (req, res)\n(err, replies) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:27:30:27:36 | replies | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:29:20 | client.duplicate | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n    }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | client. ... \\n    }) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n    }) | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n    }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:5:31:6 | exceptional return of client. ... \\n    }) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:12:29:20 | duplicate | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:29:21 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | 'arguments' object of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | CalleeFlexibleAccessPath | client.duplicate |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | (err, n ... K\\n    } | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | exceptional return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:22:31:5 | return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:23:29:25 | err | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:29:28:29:36 | newClient | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:17 | newClient | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:21 | newClient.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | exceptional return of newClie ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:9:30:35 | newClie ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:19:30:21 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | CalleeFlexibleAccessPath | newClient.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:23:30:25 | key | receiverName | newClient |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | CalleeFlexibleAccessPath | newClient.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | contextSurroundingFunctionParameters | (req, res)\n(err, newClient) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:30:28:30:34 | "value" | receiverName | newClient |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:20 | client.duplicate | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | client.duplicate() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:22 | exceptional return of client.duplicate() | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:26 | client. ... e().set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:5:32:40 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:12:32:20 | duplicate | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:24:32:26 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | CalleeFlexibleAccessPath | client.duplicate().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:28:32:30 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | CalleeFlexibleAccessPath | client.duplicate().set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | enclosingFunctionBody | req res client set req body key value key req body key key string client set key value client set key value client set key value client hmset key field value key value2 client multi set constant value set key value get key exec err replies client duplicate err newClient newClient set key value client duplicate set key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:32:33:32:39 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import  ... 'util'; | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import  ... 'util'; | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:1:36:33 | import  ... 'util'; | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:10:36:18 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:36:27:36:32 | 'util' | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:3 | app | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:37:8 | app.post | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | app.pos ... / OK\\n}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:1:53:2 | exceptional return of app.pos ... / OK\\n}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:5:37:8 | post | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:10:37:26 | '/documents/find' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:37:28 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | 'arguments' object of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | exceptional return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:29:53:1 | return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:30:37:32 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:37:35:37:37 | res | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:13 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:11:38:28 | key = req.body.key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:19 | req | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:24 | req.body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:17:38:28 | req.body.key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:21:38:24 | body | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:38:26:38:28 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:14 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:5:39:28 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:12:39:14 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:16:39:18 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | CalleeFlexibleAccessPath | client.set |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:39:21:39:27 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:18 | setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsyn ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:11:41:55 | setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:30 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | exceptional return of promisi ... nt.set) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:42 | promisi ... nt.set) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:47 | promisi ... t).bind | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | exceptional return of promisi ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:22:41:55 | promisi ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:37 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | CalleeFlexibleAccessPath | promisify |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:32:41:41 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:39:41:41 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:44:41:47 | bind | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | CalleeFlexibleAccessPath | promisify().bind |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:41:49:41:54 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:14 | foo1 | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 =  ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 =  ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 =  ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 =  ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:11:43:39 | foo1 =  ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:25 | setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | exceptional return of setAsyn ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:18:43:39 | setAsyn ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | CalleeFlexibleAccessPath | setAsync |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:27:43:29 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | CalleeFlexibleAccessPath | setAsync |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:43:32:43:38 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:19 | client.setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:5:45:43 | client. ... nt.set) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:12:45:19 | setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:31 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | exceptional return of promisi ... nt.set) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | assignedToPropName | setAsync |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:23:45:43 | promisi ... nt.set) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:38 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | CalleeFlexibleAccessPath | promisify |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:33:45:42 | client.set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:45:40:45:42 | set | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:14 | foo2 | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 =  ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 =  ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 =  ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 =  ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:11:46:46 | foo2 =  ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:23 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:32 | client.setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:18:46:46 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:25:46:32 | setAsync | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | CalleeFlexibleAccessPath | client.setAsync |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:34:46:36 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | CalleeFlexibleAccessPath | client.setAsync |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:46:39:46:45 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:10 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:20 | client.unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ...  => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ...  => {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ...  => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ...  => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:5:48:42 | client. ...  => {}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:12:48:20 | unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:32 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | exceptional return of promisify(() => {}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | assignedToPropName | unrelated |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:24:48:42 | promisify(() => {}) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | 'arguments' object of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | CalleeFlexibleAccessPath | promisify |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | () => {} | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | exceptional return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:48:34:48:41 | return of anonymous function | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:14 | foo3 | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 =  ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 =  ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 =  ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 =  ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:11:49:47 | foo3 =  ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:23 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:33 | client.unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:18:49:47 | exceptional return of client. ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:25:49:33 | unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | CalleeFlexibleAccessPath | client.unrelated |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:35:49:37 | key | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | CalleeFlexibleAccessPath | client.unrelated |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | calleeImports | redis |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:49:40:49:46 | "value" | receiverName | client |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:19 | unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelat ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:11:51:59 | unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:31 | promisify | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | exceptional return of promisi ... foobar) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:46 | promisi ... foobar) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:51 | promisi ... r).bind | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | exceptional return of promisi ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:23:51:59 | promisi ... client) | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:38 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | CalleeFlexibleAccessPath | promisify |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:33:51:45 | client.foobar | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:40:51:45 | foobar | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:48:51:51 | bind | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | CalleeFlexibleAccessPath | promisify().bind |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:51:53:51:58 | client | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:14 | foo4 | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 =  ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 =  ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 =  ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 =  ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:11:52:40 | foo4 =  ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:26 | unrelated | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | exceptional return of unrelat ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:18:52:40 | unrelat ... value") | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | CalleeFlexibleAccessPath | unrelated |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:28:52:30 | key | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | CalleeFlexibleAccessPath | unrelated |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | calleeImports | util |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | enclosingFunctionBody | req res key req body key client set key value setAsync promisify client set bind client foo1 setAsync key value client setAsync promisify client set foo2 client setAsync key value client unrelated promisify foo3 client unrelated key value unrelated promisify client foobar bind client foo4 unrelated key value |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/redis.js:52:33:52:39 | "value" | fileImports | body-parser express redis util |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:0 | this | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | db | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:1:1:1:1 | require | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:11 | express | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:5:4:32 | express ... press') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:21 | require | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | exceptional return of require('express') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:15:4:32 | require('express') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:4:23:4:31 | 'express' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:11 | sqlite3 | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:5:5:42 | sqlite3 ... rbose() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:21 | require | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | exceptional return of require('sqlite3') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:32 | require('sqlite3') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:40 | require ... verbose | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | exceptional return of require ... rbose() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:15:5:42 | require ... rbose() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:23:5:31 | 'sqlite3' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:5:34:5:40 | verbose | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:6 | db | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:5:6:41 | db = ne ... mory:') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | exceptional return of new sql ... mory:') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:10:6:41 | new sql ... mory:') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:20 | sqlite3 | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:14:6:29 | sqlite3.Database | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:22:6:29 | Database | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:6:31:6:40 | ':memory:' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:6 | io | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:5:8:31 | io = re ... .io')() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:16 | require | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | exceptional return of require('socket.io') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:29 | require('socket.io') | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | exceptional return of require ... .io')() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:10:8:31 | require ... .io')() | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:8:18:8:28 | 'socket.io' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:2 | io | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:9:5 | io.on | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | exceptional return of io.on(' ...  });\\n}) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:1:13:2 | io.on(' ...  });\\n}) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:4:9:5 | on | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | CalleeFlexibleAccessPath | io.on |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | calleeImports | socket.io |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:7:9:18 | 'connection' | receiverName | io |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | 'arguments' object of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | CalleeFlexibleAccessPath | io.on |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | calleeImports | socket.io |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | (socket ...   });\\n} | receiverName | io |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | exceptional return of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:21:13:1 | return of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:9:22:9:27 | socket | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:8 | socket | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:10:11 | socket.on | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n  }) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n  }) | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | exceptional return of socket. ... );\\n  }) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n  }) | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n  }) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n  }) | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:3:12:4 | socket. ... );\\n  }) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:10:10:11 | on | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | CalleeFlexibleAccessPath | socket.on |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | contextSurroundingFunctionParameters | (socket) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:13:10:21 | 'newuser' | receiverName | socket |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:10:23 | db | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | 'arguments' object of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | CalleeFlexibleAccessPath | socket.on |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | (handle ... `);\\n  } | receiverName | socket |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | exceptional return of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:24:12:3 | return of anonymous function | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:10:25:10:30 | handle | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:6 | db | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:10 | db.run | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | db.run( ... ndle}`) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:5:11:54 | exceptional return of db.run( ... ndle}`) | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:8:11:10 | run | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | CalleeFlexibleAccessPath | db.run |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:12:11:53 | `INSERT ... andle}` | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:13:11:43 | INSERT  ... VALUES  | stringConcatenatedWith |  -endpoint- handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | contextSurroundingFunctionParameters | (socket)\n(handle) |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | enclosingFunctionBody | socket socket on newuser handle db run INSERT INTO users(name) VALUES  handle |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | enclosingFunctionName | io.on#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | fileImports | express socket.io sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/socketio.js:11:46:11:51 | handle | stringConcatenatedWith | 'INSERT INTO users(name) VALUES ' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:0 | this | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | require | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:1:1:1 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:11 | express | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:5:1:32 | express ... press') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:21 | require | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | exceptional return of require('express') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:15:1:32 | require('express') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:1:23:1:31 | 'express' | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:9 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:7:2:28 | sql = r ... mssql') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:19 | require | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | exceptional return of require('mssql') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:13:2:28 | require('mssql') | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:2:21:2:27 | 'mssql' | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:7 | app | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:5:4:19 | app = express() | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:17 | express | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | exceptional return of express() | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:4:11:4:19 | express() | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:3 | app | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:5:7 | app.get | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | app.get ... '");\\n}) | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:1:10:2 | exceptional return of app.get ... '");\\n}) | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:5:5:7 | get | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:9:5:19 | '/post/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:5:21 | this | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | 'arguments' object of anonymous function | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | async f ... "'");\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | exceptional return of anonymous function | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:22:10:1 | return of anonymous function | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:37:5:39 | req | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:5:42:5:44 | res | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:5 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:11 | sql.query | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:3:7:62 | sql.que ... ms.id}` | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:7:7:11 | query | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:12:7:62 | `select ... ms.id}` | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select  ... e id =  | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select  ... e id =  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select  ... e id =  | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select  ... e id =  | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:13:7:45 | select  ... e id =  | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:50 | req | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:57 | req.params | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:48:7:60 | req.params.id | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:52:7:57 | params | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:7:59:7:60 | id | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | exceptional return of new sql.Request() | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:19 | new sql.Request() | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:25 | new sql ... ).query | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ...  + "'") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ...  + "'") | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ...  + "'") | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ...  + "'") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | exceptional return of new sql ...  + "'") | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ...  + "'") | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ...  + "'") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ...  + "'") | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ...  + "'") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:3:9:85 | new sql ...  + "'") | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:9 | sql | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:7:9:17 | sql.Request | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:11:9:17 | Request | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:21:9:25 | query | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:62 | "select ... id = '" | stringConcatenatedWith |  -endpoint- req.params.id + ''' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:78 | "select ... rams.id | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | CalleeFlexibleAccessPath | sql.Request().query |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | calleeImports | mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:27:9:84 | "select ... d + "'" | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:68 | req | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:75 | req.params | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:66:9:78 | req.params.id | stringConcatenatedWith | 'select * from mytable where id = '' -endpoint- ''' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:70:9:75 | params | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:77:9:78 | id | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | enclosingFunctionBody | req res sql query select * from mytable where id =  req params id sql Request query select * from mytable where id = ' req params id ' |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | fileImports | express mssql |
| autogenerated/NosqlAndSqlInjection/untyped/tst2.js:9:82:9:84 | "'" | stringConcatenatedWith | 'select * from mytable where id = '' + req.params.id -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:0 | this | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:1:1:1:1 | require | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:8 | pg | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:7:3:24 | pg = require('pg') | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:18 | require | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | exceptional return of require('pg') | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:12:3:24 | require('pg') | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:3:20:3:23 | 'pg' | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:10 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool =  ... config) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool =  ... config) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:7:4:32 | pool =  ... config) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | exceptional return of new pg.Pool(config) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:14:4:32 | new pg.Pool(config) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:19 | pg | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:18:4:24 | pg.Pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:21:4:24 | Pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | CalleeFlexibleAccessPath | pg.Pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:4:26:4:31 | config | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:6:0 | this | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | 'arguments' object of function handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | exceptional return of function handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ...   });\\n} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ...   });\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | functio ...   });\\n} | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:1:19:1 | return of function handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:10:6:16 | handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:18:6:20 | req | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:6:23:6:25 | res | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:7:12 | query1 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1  ...  PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1  ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1  ...  PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1  ...  PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:7:8:55 | query1  ...  PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:7:69 | "SELECT ... GORY='" | stringConcatenatedWith |  -endpoint- req.params.category + '' ORDER BY PRICE' |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:34 | "SELECT ... ategory | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ...  PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ...  PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ...  PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:7:16:8:55 | "SELECT ...  PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:18 | req | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:25 | req.params | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:16:8:34 | req.params.category | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' -endpoint- '' ORDER BY PRICE' |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:20:8:25 | params | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:27:8:34 | category | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:8:38:8:55 | "' ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='' + req.params.category -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:6 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:9:12 | pool.query | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n  }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n  }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n  }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | exceptional return of pool.qu ... ts\\n  }) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n  }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n  }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n  }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:3:11:4 | pool.qu ... ts\\n  }) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:8:9:12 | query | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:14:9:19 | query1 | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:22:9:23 | [] | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:9:25 | this | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | 'arguments' object of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | exceptional return of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | functio ... lts\\n  } | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:26:11:3 | return of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:35:9:37 | err | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:9:40:9:46 | results | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:14:12 | query2 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2  ...  PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2  ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2  ...  PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2  ...  PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:7:15:32 | query2  ...  PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:14:70 | "SELECT ... ORY=$1" | stringConcatenatedWith |  -endpoint- ' ORDER BY PRICE' |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ...  PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ...  PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ...  PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ...  PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:14:16:15:32 | "SELECT ...  PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:15:16:15:32 | " ORDER BY PRICE" | stringConcatenatedWith | 'SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1' -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:6 | pool | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:16:12 | pool.query | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n  }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n  }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n  }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | exceptional return of pool.qu ... ts\\n  }) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n  }) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n  }) | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n  }) | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:3:18:4 | pool.qu ... ts\\n  }) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:8:16:12 | query | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:14:16:19 | query2 | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:22:16:42 | [req.pa ... tegory] | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:25 | req | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:32 | req.params | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:23:16:41 | req.params.category | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:27:16:32 | params | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:34:16:41 | category | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:16:44 | this | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | 'arguments' object of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | exceptional return of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | CalleeFlexibleAccessPath | pool.query |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | InputArgumentIndex | 2 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | calleeImports | pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | functio ... lts\\n  } | receiverName | pool |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:45:18:3 | return of anonymous function | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:54:16:56 | err | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | contextSurroundingFunctionParameters | (req, res)\n(err, results) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | enclosingFunctionBody | req res query1 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=' req params category ' ORDER BY PRICE pool query query1 err results query2 SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY=$1  ORDER BY PRICE pool query query2 req params category err results |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | enclosingFunctionName | handler |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:16:59:16:65 | results | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:7 | require | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | exceptional return of require('express') | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:18 | require('express') | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | exceptional return of require('express')() | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:20 | require('express')() | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:24 | require ... )().get | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | exceptional return of require ... andler) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:1:21:41 | require ... andler) | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:9:21:17 | 'express' | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:22:21:24 | get | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:26:21:31 | '/foo' | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | CalleeFlexibleAccessPath | import(!)().get |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst3.js:21:34:21:40 | handler | fileImports | express pg |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:0 | this | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | db | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:1:1:1:1 | require | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:11 | sqlite3 | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:5:3:42 | sqlite3 ... rbose() | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:21 | require | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | exceptional return of require('sqlite3') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:32 | require('sqlite3') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:40 | require ... verbose | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | exceptional return of require ... rbose() | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:15:3:42 | require ... rbose() | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:23:3:31 | 'sqlite3' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:3:34:3:40 | verbose | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:6 | db | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:5:4:41 | db = ne ... mory:') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | exceptional return of new sql ... mory:') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:10:4:41 | new sql ... mory:') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:20 | sqlite3 | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:14:4:29 | sqlite3.Database | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:22:4:29 | Database | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:4:31:4:40 | ':memory:' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:7 | angular | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:14 | angular.module | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | angular ... oute']) | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:6:36 | exceptional return of angular ... oute']) | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:7:11 | angular ... troller | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | angular ... "');\\n}) | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:1:9:2 | exceptional return of angular ... "');\\n}) | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:9:6:14 | module | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | CalleeFlexibleAccessPath | angular.module |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:16:6:22 | 'myApp' | receiverName | angular |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | CalleeFlexibleAccessPath | angular.module |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:25:6:35 | ['ngRoute'] | receiverName | angular |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:6:26:6:34 | 'ngRoute' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:2:7:11 | controller | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | CalleeFlexibleAccessPath | angular.module().controller |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:13:7:22 | 'FindPost' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | db | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:7:24 | this | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | 'arguments' object of anonymous function | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | exceptional return of anonymous function | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | CalleeFlexibleAccessPath | angular.module().controller |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | functio ... '"');\\n} | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:25:9:1 | return of anonymous function | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:7:34:7:45 | $routeParams | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:4 | db | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:8 | db.get | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ...  + '"') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ...  + '"') | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ...  + '"') | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ...  + '"') | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | db.get( ...  + '"') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ...  + '"') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ...  + '"') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ...  + '"') | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ...  + '"') | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:3:8:67 | exceptional return of db.get( ...  + '"') | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:6:8:8 | get | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:42 | 'SELECT ... id = "' | stringConcatenatedWith |  -endpoint- $routeParams.id + '"' |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:60 | 'SELECT ... rams.id | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | CalleeFlexibleAccessPath | db.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:10:8:66 | 'SELECT ... d + '"' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:57 | $routeParams | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:46:8:60 | $routeParams.id | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' -endpoint- '"' |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:59:8:60 | id | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | contextSurroundingFunctionParameters | ($routeParams) |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | enclosingFunctionBody | $routeParams db get SELECT * FROM Post WHERE id = " $routeParams id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | enclosingFunctionName | controller#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | fileImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst4.js:8:64:8:66 | '"' | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' + $routeParams.id -endpoint-  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:0 | this | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | db | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:1:1:1:1 | require | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:11 | express | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:5:4:32 | express ... press') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:21 | require | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | exceptional return of require('express') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:15:4:32 | require('express') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:4:23:4:31 | 'express' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:11 | sqlite3 | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:5:5:42 | sqlite3 ... rbose() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:21 | require | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | exceptional return of require('sqlite3') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:32 | require('sqlite3') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:40 | require ... verbose | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | exceptional return of require ... rbose() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:15:5:42 | require ... rbose() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | CalleeFlexibleAccessPath | require |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | calleeImports |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:23:5:31 | 'sqlite3' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:5:34:5:40 | verbose | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:6 | db | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:5:6:41 | db = ne ... mory:') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | exceptional return of new sql ... mory:') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:10:6:41 | new sql ... mory:') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:20 | sqlite3 | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:14:6:29 | sqlite3.Database | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:22:6:29 | Database | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | CalleeFlexibleAccessPath | sqlite3.Database |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:6:31:6:40 | ':memory:' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:7 | app | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:5:8:19 | app = express() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:17 | express | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | exceptional return of express() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:8:11:8:19 | express() | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:3 | app | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:9:7 | app.get | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | app.get ... "');\\n}) | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:1:11:2 | exceptional return of app.get ... "');\\n}) | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:5:9:7 | get | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:9:9:19 | '/post/:id' | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | db | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:9:21 | this | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | 'arguments' object of anonymous function | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | exceptional return of anonymous function | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | InputArgumentIndex | 1 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | calleeImports | express |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | functio ... '"');\\n} | receiverName | app |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:22:11:1 | return of anonymous function | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:31:9:33 | req | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:9:36:9:38 | res | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:4 | db | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:8 | db.get | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ...  + '"') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ...  + '"') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ...  + '"') | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ...  + '"') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | db.get( ...  + '"') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ...  + '"') | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ...  + '"') | contextSurroundingFunctionParameters |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ...  + '"') | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ...  + '"') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:3:10:65 | exceptional return of db.get( ...  + '"') | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:6:10:8 | get | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:42 | 'SELECT ... id = "' | stringConcatenatedWith |  -endpoint- req.params.id + '"' |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:58 | 'SELECT ... rams.id | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | CalleeFlexibleAccessPath | db.get |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | InputArgumentIndex | 0 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | calleeImports | sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:10:10:64 | 'SELECT ... d + '"' | receiverName | db |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:48 | req | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:55 | req.params | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:46:10:58 | req.params.id | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' -endpoint- '"' |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:50:10:55 | params | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:57:10:58 | id | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | contextFunctionInterfaces |  |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | enclosingFunctionBody | req res db get SELECT * FROM Post WHERE id = " req params id " |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | fileImports | express sqlite3 |
| autogenerated/NosqlAndSqlInjection/untyped/tst.js:10:62:10:64 | '"' | stringConcatenatedWith | 'SELECT * FROM Post WHERE id = "' + req.params.id -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:0 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:1:1:1 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:16 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:10:1:33 | require ... ocess") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:1:18:1:32 | "child_process" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:8 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:5:2:26 | http =  ... 'http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:18 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:12:2:26 | require('http') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:2:20:2:25 | 'http' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:7 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:5:3:24 | url = require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:17 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:11:3:24 | require('url') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:3:19:3:23 | 'url' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:5:10 | server | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server  ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server  ... Y] \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:5:64:2 | server  ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:17 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:5:30 | http.createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | exceptional return of http.cr ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:14:64:2 | http.cr ... Y] \\n\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:19:5:30 | createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:5:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | functio ... CY] \\n\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:32:64:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:41:5:43 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:5:46:5:48 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:11 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:9:6:49 | cmd = u ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:17 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:23 | url.parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | exceptional return of url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:38 | url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:44 | url.par ... ).query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:15:6:49 | url.par ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:19:6:23 | parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:27 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:25:6:31 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:29:6:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:34:6:37 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:40:6:44 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:6:46:6:49 | path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | cp.exec("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:5:8:18 | exceptional return of cp.exec("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:8:8:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:8:13:8:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:15 | cp.execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | cp.execSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:5:9:22 | exceptional return of cp.execSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:8:9:15 | execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:9:17:9:21 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | cp.execFile("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:5:10:22 | exceptional return of cp.execFile("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:8:10:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:10:17:10:21 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:19 | cp.execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | cp.exec ... ("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:5:11:26 | exceptional return of cp.exec ... ("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:8:11:19 | execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:11:21:11:25 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | cp.spawn("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:5:12:19 | exceptional return of cp.spawn("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:8:12:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:12:14:12:18 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:16 | cp.spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | cp.spawnSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:5:13:23 | exceptional return of cp.spawnSync("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:8:13:16 | spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:13:18:13:22 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:11 | cp.fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | cp.fork("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:5:14:18 | exceptional return of cp.fork("foo") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:8:14:11 | fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | CalleeFlexibleAccessPath | cp.fork |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:14:13:14:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | cp.exec(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:5:17:16 | exceptional return of cp.exec(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:8:17:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:17:13:17:15 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:15 | cp.execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | cp.execSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:5:18:20 | exceptional return of cp.execSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:8:18:15 | execSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:18:17:18:19 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | cp.execFile(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:5:19:20 | exceptional return of cp.execFile(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:8:19:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:19:17:19:19 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:19 | cp.execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | cp.execFileSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:5:20:24 | exceptional return of cp.execFileSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:8:20:19 | execFileSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:20:21:20:23 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | cp.spawn(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:5:21:17 | exceptional return of cp.spawn(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:8:21:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:21:14:21:16 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:16 | cp.spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | cp.spawnSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:5:22:21 | exceptional return of cp.spawnSync(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:8:22:16 | spawnSync | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:22:18:22:20 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:11 | cp.fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | cp.fork(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:5:23:16 | exceptional return of cp.fork(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:8:23:11 | fork | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | CalleeFlexibleAccessPath | cp.fork |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:23:13:23:15 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ...  "bar") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ...  "bar") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ...  "bar") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ...  "bar") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | cp.exec ...  "bar") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ...  "bar") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ...  "bar") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ...  "bar") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ...  "bar") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:5:25:32 | exceptional return of cp.exec ...  "bar") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:8:25:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:17 | "foo" | stringConcatenatedWith |  -endpoint- cmd + 'bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:23 | "foo" + cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:13:25:31 | "foo" + cmd + "bar" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:21:25:23 | cmd | stringConcatenatedWith | 'foo' -endpoint- 'bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:25:27:25:31 | "bar" | stringConcatenatedWith | 'foo' + cmd -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:5:28:32 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:8:28:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:13:28:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:20:28:31 | {shell: cmd} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:25 | shell | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:21:28:30 | shell: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | InputAccessPathFromCallee | 1.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:28:28:28:30 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ...  cmd}}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ...  cmd}}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ...  cmd}}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ...  cmd}}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | cp.exec ...  cmd}}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ...  cmd}}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ...  cmd}}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ...  cmd}}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ...  cmd}}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:5:29:38 | exceptional return of cp.exec ...  cmd}}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:8:29:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:13:29:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:20:29:37 | {env: {PATH: cmd}} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:23 | env | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:21:29:36 | env: {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | InputAccessPathFromCallee | 1.env |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | assignedToPropName | env |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:26:29:36 | {PATH: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:30 | PATH | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:27:29:35 | PATH: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | InputAccessPathFromCallee | 1.env.PATH |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | assignedToPropName | PATH |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:29:33:29:35 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:5:30:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:8:30:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:13:30:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:20:30:29 | {cwd: cmd} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:23 | cwd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:21:30:28 | cwd: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | InputAccessPathFromCallee | 1.cwd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | assignedToPropName | cwd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:30:26:30:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:5:31:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:8:31:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:13:31:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:20:31:29 | {uid: cmd} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:23 | uid | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:21:31:28 | uid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | InputAccessPathFromCallee | 1.uid |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | assignedToPropName | uid |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:31:26:31:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:11 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:5:32:30 | exceptional return of cp.exec ... : cmd}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:8:32:11 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:13:32:17 | "foo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:20:32:29 | {gid: cmd} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:23 | gid | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:21:32:28 | gid: cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | InputAccessPathFromCallee | 1.gid |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | assignedToPropName | gid |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:32:26:32:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:9:34:10 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:34:13:34:16 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:15 | process | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:24 | process.platform | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:9:35:35 | process ... 'win32' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:17:35:24 | platform | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:35:29:35:35 | 'win32' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:8 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:20 | sh = 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ...  = '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ...  = '/c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ...  = '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ...  = '/c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:7:36:33 | sh = 'c ...  = '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:12:36:20 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:26 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:23:36:33 | flag = '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:36:30:36:33 | '/c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:8 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:20 | sh = '/bin/sh' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ...  = '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ...  = '-c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ...  = '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ...  = '-c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:7:38:33 | sh = '/ ...  = '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:12:38:20 | '/bin/sh' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:26 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:23:38:33 | flag = '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:38:30:38:33 | '-c' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:5 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ...  cmd ]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ...  cmd ]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ...  cmd ]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ...  cmd ]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | cp.spaw ...  cmd ]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ...  cmd ]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ...  cmd ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ...  cmd ]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ...  cmd ]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:5:39:31 | exceptional return of cp.spaw ...  cmd ]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:8:39:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:14:39:15 | sh | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:18:39:30 | [ flag, cmd ] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:20:39:23 | flag | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:39:26:39:28 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:9:41:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:41:16:41:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:5:42:18 | args[0] = "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:10:42:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | assignedToPropName | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:42:15:42:18 | "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:5:43:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:10:43:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | assignedToPropName | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:43:15:43:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:5:44:34 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:8:44:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:17:44:27 | "/bin/bash" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:44:30:44:33 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:9:46:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:46:16:46:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:5:47:18 | args[0] = "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:10:47:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | assignedToPropName | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:47:15:47:18 | "-c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:5:48:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:10:48:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | assignedToPropName | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:48:15:48:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:7 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | exceptional return of run("sh", args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:5:49:19 | run("sh", args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | CalleeFlexibleAccessPath | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:9:49:12 | "sh" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | CalleeFlexibleAccessPath | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:49:15:49:18 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:12 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:9:51:17 | args = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:51:16:51:17 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:11 | args[0] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:5:52:23 | args[0] = `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:10:52:10 | 0 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:17 | `-` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | assignedToPropName | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:15:52:23 | `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:16:52:16 | - | stringConcatenatedWith |  -endpoint- 'c' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:52:21:52:23 | "c" | stringConcatenatedWith | '-' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:8 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:11 | args[1] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:5:53:17 | args[1] = cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:10:53:10 | 1 | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | assignedToPropName | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:53:15:53:17 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:5:54:39 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:8:54:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:22 | `/bin` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:17:54:32 | `/bin` + "/bash" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:18:54:21 | /bin | stringConcatenatedWith |  -endpoint- '/bash' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:26:54:32 | "/bash" | stringConcatenatedWith | '/bin' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:54:35:54:38 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ...  cmd])) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ...  cmd])) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ...  cmd])) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ...  cmd])) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | cp.spaw ...  cmd])) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ...  cmd])) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ...  cmd])) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ...  cmd])) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ...  cmd])) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:5:56:59 | exceptional return of cp.spaw ...  cmd])) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:8:56:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:14:56:22 | 'cmd.exe' | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:37 | ['/C', 'foo'] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:44 | ['/C', 'foo'].concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | ['/C',  ... , cmd]) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C',  ... , cmd]) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C',  ... , cmd]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C',  ... , cmd]) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C',  ... , cmd]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:25:56:58 | exceptional return of ['/C',  ... , cmd]) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:26:56:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:32:56:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:39:56:44 | concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:46:56:57 | ["bar", cmd] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:47:56:51 | "bar" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:56:54:56:56 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:12 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | cp.spaw ... t(cmd)) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:5:57:50 | exceptional return of cp.spaw ... t(cmd)) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:8:57:12 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:14:57:22 | 'cmd.exe' | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:37 | ['/C', 'foo'] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:44 | ['/C', 'foo'].concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | ['/C',  ... at(cmd) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C',  ... at(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C',  ... at(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C',  ... at(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C',  ... at(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:25:57:49 | exceptional return of ['/C',  ... at(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:26:57:29 | '/C' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:32:57:36 | 'foo' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:39:57:44 | concat | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:57:46:57:48 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:11 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:6:59:16 | myArgs = [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:59:15:59:16 | [] | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:10 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:15 | myArgs.push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ...  + "c") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ...  + "c") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ...  + "c") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ...  + "c") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | exceptional return of myArgs. ...  + "c") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ...  + "c") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ...  + "c") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ...  + "c") | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ...  + "c") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:5:60:26 | myArgs. ...  + "c") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:12:60:15 | push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:19 | `-` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | CalleeFlexibleAccessPath | myArgs.push |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:17:60:25 | `-` + "c" | receiverName | myArgs |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:18:60:18 | - | stringConcatenatedWith |  -endpoint- 'c' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:60:23:60:25 | "c" | stringConcatenatedWith | '-' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:10 | myArgs | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:15 | myArgs.push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | exceptional return of myArgs.push(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:5:61:20 | myArgs.push(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:12:61:15 | push | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | CalleeFlexibleAccessPath | myArgs.push |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:61:17:61:19 | cmd | receiverName | myArgs |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:6 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:15 | cp.execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:5:62:39 | exceptional return of cp.exec ... , args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:8:62:15 | execFile | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:22 | `/bin` | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:17:62:32 | `/bin` + "/bash" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:18:62:21 | /bin | stringConcatenatedWith |  -endpoint- '/bash' |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:26:62:32 | "/bash" | stringConcatenatedWith | '/bin' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | enclosingFunctionBody | req res cmd url parse req url true query path cp exec foo cp execSync foo cp execFile foo cp execFileSync foo cp spawn foo cp spawnSync foo cp fork foo cp exec cmd cp execSync cmd cp execFile cmd cp execFileSync cmd cp spawn cmd cp spawnSync cmd cp fork cmd cp exec foo cmd bar cp exec foo shell cmd cp exec foo env PATH cmd cp exec foo cwd cmd cp exec foo uid cmd cp exec foo gid cmd sh flag process platform win32 sh cmd.exe flag /c sh /bin/sh flag -c cp spawn sh flag cmd args args 0 0 -c args 1 1 cmd cp execFile /bin/bash args args args 0 0 -c args 1 1 cmd run sh args args args 0 0 - c args 1 1 cmd cp execFile /bin /bash args cp spawn cmd.exe /C foo concat bar cmd cp spawn cmd.exe /C foo concat cmd myArgs myArgs push - c myArgs push cmd cp execFile /bin /bash args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:62:35:62:38 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:66:0 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | 'arguments' object of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | exceptional return of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | functio ... uild.\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:1:68:1 | return of function run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:10:66:12 | run | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:14:66:16 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:66:19:66:22 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:4 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:10 | cp.spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | cp.spawn(cmd, args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:3:67:21 | exceptional return of cp.spawn(cmd, args) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:6:67:10 | spawn | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:12:67:14 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | enclosingFunctionBody | cmd args cp spawn cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | enclosingFunctionName | run |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:67:17:67:20 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:8 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util =  ... "util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util =  ... "util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:5:70:26 | util =  ... "util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:18 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | exceptional return of require("util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:12:70:26 | require("util") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:70:20:70:25 | "util" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:4 | http | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:72:17 | http.createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:1:76:2 | http.cr ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:6:72:17 | createServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:72:18 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:19:76:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:28:72:30 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:72:33:72:35 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:11 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:9:73:49 | cmd = u ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:17 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:23 | url.parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | exceptional return of url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:38 | url.par ... , true) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:44 | url.par ... ).query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:15:73:49 | url.par ... ry.path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:19:73:23 | parse | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:27 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:25:73:31 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:29:73:31 | url | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:34:73:37 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:40:73:44 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:73:46:73:49 | path | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:8 | util | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:18 | util.promisify | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | exceptional return of util.pr ... p.exec) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:27 | util.pr ... p.exec) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | exceptional return of util.pr ... c)(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:5:75:32 | util.pr ... c)(cmd) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:10:75:18 | promisify | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:21 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | CalleeFlexibleAccessPath | util.promisify |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:20:75:26 | cp.exec | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:23:75:26 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | CalleeFlexibleAccessPath | util.promisify() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path util promisify cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:75:29:75:31 | cmd | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:22 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpack ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:7:79:54 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:32 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | exceptional return of require ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:26:79:54 | require ... erver') | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:79:34:79:53 | 'webpack-dev-server' | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ...    }\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | exceptional return of new web ...    }\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ...    }\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:1:88:2 | new web ...    }\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:5:80:20 | webpackDevServer | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | CalleeFlexibleAccessPath | webpackDevServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | calleeImports | webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:22:80:29 | compiler | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | CalleeFlexibleAccessPath | webpackDevServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | calleeImports | webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:80:32:88:1 | {\\n    b ...     }\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:81:10 | before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:5:87:5 | before: ... ;\\n    } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:81:12 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | 'arguments' object of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | exceptional return of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | webpackDevServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | InputAccessPathFromCallee | ?.before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | assignedToPropName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | calleeImports | webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | functio ... ;\\n    } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:13:87:5 | return of method before | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:81:23:81:25 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:11 | app | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:82:15 | app.use | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ...      }) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ...      }) | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ...      }) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ...      }) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | app.use ...      }) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ...      }) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ...      }) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ...      }) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:9:86:10 | exceptional return of app.use ...      }) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | contextSurroundingFunctionParameters | (app) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:13:82:15 | use | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:82:16 | this | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | CalleeFlexibleAccessPath | app.use |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | functio ...       } | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:17:86:9 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:27:82:29 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:32:82:34 | res | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:82:37:82:40 | next | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:12 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:17 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | cp.exec ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:11:83:37 | exceptional return of cp.exec ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:14:83:17 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:21 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:27 | req.query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:19:83:36 | req.query.fileName | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:23:83:27 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:83:29:83:36 | fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:17 | require | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | exceptional return of require ... b-lib") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:31 | require ... b-lib") | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:35 | require ... b").foo | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | exceptional return of require ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:11:85:55 | require ... leName) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:19:85:30 | "my-sub-lib" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:33:85:35 | foo | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:39 | req | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:45 | req.query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | CalleeFlexibleAccessPath | import(!).foo |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | calleeImports | my-sub-lib |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:37:85:54 | req.query.fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:41:85:45 | query | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | contextSurroundingFunctionParameters | (app)\n(req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | enclosingFunctionBody | app app use req res next cp exec req query fileName require my-sub-lib foo req query fileName |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | enclosingFunctionName | before |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:85:47:85:54 | fileName | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import  ... outer"; | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import  ... outer"; | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:1:90:32 | import  ... outer"; | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:8:90:13 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:90:20:90:31 | "koa-router" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:12 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router  ... outer() | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router  ... outer() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:7:91:27 | router  ... outer() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | exceptional return of new Router() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:16:91:27 | new Router() | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:91:20:91:25 | Router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:6 | router | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:93:10 | router.get | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | exceptional return of router. ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:1:95:2 | router. ... T OK\\n}) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:8:93:10 | get | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | CalleeFlexibleAccessPath | router.get |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | calleeImports | koa-router |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:12:93:24 | "/ping/:host" | receiverName | router |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:93:26 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | 'arguments' object of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | CalleeFlexibleAccessPath | router.get |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | calleeImports | koa-router |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | async ( ... OT OK\\n} | receiverName | router |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | exceptional return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:27:95:1 | return of anonymous function | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:93:34:93:36 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:4 | cp | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:9 | cp.exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | cp.exec ... s.host) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:3:94:36 | exceptional return of cp.exec ... s.host) | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:6:94:9 | exec | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:17 | "ping " | stringConcatenatedWith |  -endpoint- ctx.params.host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:11:94:35 | "ping " ... ms.host | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:23 | ctx | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:30 | ctx.params | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:21:94:35 | ctx.params.host | stringConcatenatedWith | 'ping ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:25:94:30 | params | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | contextFunctionInterfaces | before(app)\nrun(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | contextSurroundingFunctionParameters | (ctx) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | enclosingFunctionBody | ctx cp exec ping  ctx params host |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | enclosingFunctionName | router.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/child_process-test.js:94:32:94:35 | host | fileImports | child_process http koa-router my-sub-lib url util webpack-dev-server |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:1:1:1 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:8 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:7:1:35 | cp = re ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:18 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:1:20:1:34 | 'child_process' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:8 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:5:2:26 | http =  ... 'http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:18 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:12:2:26 | require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:2:20:2:25 | 'http' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:7 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:5:3:24 | url = require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:17 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:11:3:24 | require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:3:19:3:23 | 'url' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | enclosingFunctionBody | sh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:5:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | enclosingFunctionBody | sh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | 'arguments' object of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | enclosingFunctionBody | sh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | exceptional return of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | functio ... "sh";\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | enclosingFunctionBody | sh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:1:7:1 | return of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:5:10:5:17 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | enclosingFunctionBody | sh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:6:12:6:15 | "sh" | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:9:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | 'arguments' object of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | exceptional return of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | functio ... / BAD\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:1:11:1 | return of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:10:9:15 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:17:9:23 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:9:26:9:32 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:13 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:19 | cp.spawn | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | cp.spaw ... ptions) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:12:10:57 | exceptional return of cp.spaw ... ptions) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:15:10:19 | spawn | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:28 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | exceptional return of getShell() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:21:10:30 | getShell() | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:33:10:47 | ["-c", command] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:34:10:37 | "-c" | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:40:10:46 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | enclosingFunctionBody | command options cp spawn getShell -c command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:10:50:10:56 | options | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:4 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:13:17 | http.createServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | exceptional return of http.cr ... md);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:1:16:2 | http.cr ... md);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:6:13:17 | createServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:13:18 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | 'arguments' object of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | exceptional return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | functio ... cmd);\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:19:16:1 | return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:29:13:31 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:13:34:13:36 | res | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:11 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:9:14:49 | cmd = u ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:17 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:23 | url.parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | exceptional return of url.par ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:38 | url.par ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:44 | url.par ... ).query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:15:14:49 | url.par ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:19:14:23 | parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:27 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:25:14:31 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:29:14:31 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:34:14:37 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:40:14:44 | query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:14:46:14:49 | path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:10 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | exceptional return of execSh(cmd) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:5:15:15 | execSh(cmd) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | CalleeFlexibleAccessPath | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh2.js:15:12:15:14 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:1:1:1 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:8 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:7:1:35 | cp = re ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:18 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:1:20:1:34 | 'child_process' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:8 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:5:2:26 | http =  ... 'http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:18 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | exceptional return of require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:12:2:26 | require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:2:20:2:25 | 'http' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:7 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:5:3:24 | url = require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:17 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | exceptional return of require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:11:3:24 | require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:3:19:3:23 | 'url' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:5:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | 'arguments' object of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | exceptional return of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ...     }\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | functio ...     }\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:1:11:1 | return of function getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:5:10:5:17 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:15 | process | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:24 | process.platform | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:9:6:36 | process ... 'win32' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:17:6:24 | platform | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:6:30:6:36 | 'win32' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd:  ...  '/C' } | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd:  ...  '/C' } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd:  ...  '/C' } | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd:  ...  '/C' } | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:16:7:40 | { cmd:  ...  '/C' } | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:20 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:18:7:27 | cmd: 'cmd' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | assignedToPropName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:23:7:27 | 'cmd' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:32 | arg | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:30:7:38 | arg: '/C' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | assignedToPropName | arg |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:7:35:7:38 | '/C' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd:  ...  '-c' } | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd:  ...  '-c' } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd:  ...  '-c' } | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd:  ...  '-c' } | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:16:9:39 | { cmd:  ...  '-c' } | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:20 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:18:9:26 | cmd: 'sh' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | assignedToPropName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:23:9:26 | 'sh' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:31 | arg | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:29:9:37 | arg: '-c' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | assignedToPropName | arg |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | enclosingFunctionBody | process platform win32 cmd cmd arg /C cmd sh arg -c |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | enclosingFunctionName | getShell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:9:34:9:37 | '-c' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:13:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | 'arguments' object of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | exceptional return of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | functio ... / BAD\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:1:16:1 | return of function execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:10:13:15 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:17:13:23 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:13:26:13:32 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:13 | shell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:9:14:26 | shell = getShell() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:24 | getShell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | exceptional return of getShell() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:14:17:14:26 | getShell() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:13 | cp | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:19 | cp.spawn | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | cp.spaw ... ptions) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:12:15:61 | exceptional return of cp.spaw ... ptions) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:15:15:19 | spawn | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:25 | shell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:21:15:29 | shell.cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:27:15:29 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:32:15:51 | [shell.arg, command] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:37 | shell | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:33:15:41 | shell.arg | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:39:15:41 | arg | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:44:15:50 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | contextSurroundingFunctionParameters | (command, options) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | enclosingFunctionBody | command options shell getShell cp spawn shell cmd shell arg command options |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | enclosingFunctionName | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:15:54:15:60 | options | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:4 | http | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:18:17 | http.createServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | exceptional return of http.cr ... md);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:1:21:2 | http.cr ... md);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:6:18:17 | createServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:18:18 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | 'arguments' object of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | exceptional return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | functio ... cmd);\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:19:21:1 | return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:29:18:31 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:18:34:18:36 | res | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:11 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:9:19:49 | cmd = u ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:17 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:23 | url.parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | exceptional return of url.par ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:38 | url.par ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:44 | url.par ... ).query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:15:19:49 | url.par ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:19:19:23 | parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:27 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:25:19:31 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:29:19:31 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:34:19:37 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:40:19:44 | query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:19:46:19:49 | path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:10 | execSh | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | exceptional return of execSh(cmd) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:5:20:15 | execSh(cmd) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | CalleeFlexibleAccessPath | execSh |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | contextFunctionInterfaces | execSh(command, options)\ngetShell() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path execSh cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/exec-sh.js:20:12:20:14 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:1:1:1 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:8 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec =  ... ').exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec =  ... ').exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:5:1:40 | exec =  ... ').exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:18 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | exceptional return of require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:35 | require ... ocess') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:12:1:40 | require ... ').exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:20:1:34 | 'child_process' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:1:37:1:40 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:3:1 | iterator | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | 'arguments' object of function asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | exceptional return of function asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | functio ... })();\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:1:11:1 | return of function asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:10:3:18 | asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:20:3:22 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:3:25:3:32 | iterator | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:7 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:7:4:11 | i = 0 | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:4:11:4:11 | 0 | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n  }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n  }) | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n  }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n  }) | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:4 | (functi ... );\\n  }) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n  })() | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n  })() | contextSurroundingFunctionParameters | (arr, iterator) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n  })() | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n  })() | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | (functi ... \\n  })() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n  })() | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n  })() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n  })() | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n  })() | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:3:10:6 | exceptional return of (functi ... \\n  })() | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | iterator | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:3 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:5:4 | iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | 'arguments' object of function iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | exceptional return of function iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n  } | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n  } | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n  } | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n  } | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | functio ... });\\n  } | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:4:10:3 | return of function iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:5:13:5:19 | iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:6:12 | iterator | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n    }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n    }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n    }) | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | exceptional return of iterato ... \\n    }) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n    }) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n    }) | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n    }) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n    }) | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:5:9:6 | iterato ... \\n    }) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:16 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | CalleeFlexibleAccessPath | iterator |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:14:6:21 | arr[i++] | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:18 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | contextSurroundingFunctionParameters | (arr, iterator)\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:18:6:20 | i++ | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:6:23 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | 'arguments' object of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | exceptional return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | iterator |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | functio ... ;\\n    } | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:6:24:9:5 | return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:11 | i | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:11:7:24 | i < arr.length | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:17 | arr | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:15:7:24 | arr.length | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:7:19:7:24 | length | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:15 | process | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:24 | process.nextTick | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | exceptional return of process ... terate) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:9:8:33 | process ... terate) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:17:8:24 | nextTick | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | CalleeFlexibleAccessPath | process.nextTick |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | calleeImports | process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | contextSurroundingFunctionParameters | (arr, iterator)\n()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | enclosingFunctionBody | arr iterator i 0 iterate iterator arr i i arr length process nextTick iterate |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | enclosingFunctionName | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:8:26:8:32 | iterate | receiverName | process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:13:0 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | 'arguments' object of function execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | exceptional return of function execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | functio ... T OK \\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:1:15:1 | return of function execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | contextSurroundingFunctionParameters | (commands) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:10:13:17 | execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | contextSurroundingFunctionParameters | (commands) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:13:19:13:26 | commands | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | contextSurroundingFunctionParameters | (commands) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:11 | asyncEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | contextSurroundingFunctionParameters | (commands) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | asyncEa ... mmand)) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:3:14:49 | exceptional return of asyncEa ... mmand)) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | CalleeFlexibleAccessPath | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | contextSurroundingFunctionParameters | (commands) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:13:14:20 | commands | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:22 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | 'arguments' object of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | CalleeFlexibleAccessPath | asyncEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | contextSurroundingFunctionParameters | (commands)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | (comman ... ommand) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | exceptional return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:23:14:48 | return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | contextSurroundingFunctionParameters | (commands)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:24:14:30 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | contextSurroundingFunctionParameters | (commands)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:39 | exec | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exceptional return of exec(command) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | contextSurroundingFunctionParameters | (commands)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:36:14:48 | exec(command) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | contextSurroundingFunctionParameters | (commands)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | enclosingFunctionBody | commands asyncEach commands command exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | enclosingFunctionName | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:14:41:14:47 | command | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:7 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | exceptional return of require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:15 | require('http') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:17:28 | require ... eServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | exceptional return of require ... d]);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:1:20:2 | require ... d]);\\n}) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:9:17:14 | 'http' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:17:17:28 | createServer | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:17:29 | this | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | 'arguments' object of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | exceptional return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | CalleeFlexibleAccessPath | import(!).createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | functio ... md]);\\n} | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:30:20:1 | return of anonymous function | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:39:17:41 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:17:44:17:46 | res | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:9 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:7:18:58 | cmd = r ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:19 | require | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | exceptional return of require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:26 | require('url') | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:32 | require('url').parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | exceptional return of require ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:47 | require ... , true) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:53 | require ... ).query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:13:18:58 | require ... ry.path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:21:18:25 | 'url' | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:28:18:32 | parse | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:36 | req | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | CalleeFlexibleAccessPath | import(!).parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:34:18:40 | req.url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:38:18:40 | url | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | CalleeFlexibleAccessPath | import(!).parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:43:18:46 | true | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:49:18:53 | query | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:18:55:18:58 | path | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:10 | execEach | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | exceptional return of execEach([cmd]) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:3:19:17 | execEach([cmd]) | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | CalleeFlexibleAccessPath | execEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:12:19:16 | [cmd] | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextFunctionInterfaces | asyncEach(arr, iterator)\nexecEach(commands)\niterate() |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionBody | req res cmd require url parse req url true query path execEach cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | enclosingFunctionName | createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/execSeries.js:19:13:19:15 | cmd | fileImports | child_process http url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:0 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | Busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:1:1:1 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:11 | express | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:5:1:32 | express ... press') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:21 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | exceptional return of require('express') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:15:1:32 | require('express') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:1:23:1:31 | 'express' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:10 | multer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer  ... ulter') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer  ... ulter') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:5:2:31 | multer  ... ulter') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:21 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | exceptional return of require('multer') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:15:2:31 | require('multer') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:2:23:2:30 | 'multer' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:10 | upload | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload  ... ds/' }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload  ... ds/' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:5:3:41 | upload  ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:19 | multer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | exceptional return of multer( ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:14:3:41 | multer( ... ds/' }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | CalleeFlexibleAccessPath | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | calleeImports | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:21:3:40 | { dest: 'uploads/' } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:26 | dest | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:23:3:38 | dest: 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | CalleeFlexibleAccessPath | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | InputAccessPathFromCallee | 0.dest |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | assignedToPropName | dest |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | calleeImports | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:3:29:3:38 | 'uploads/' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:7 | app | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:5:5:19 | app = express() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:17 | express | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | exceptional return of express() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:5:11:5:19 | express() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec =  ... ").exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec =  ... ").exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:5:6:40 | exec =  ... ").exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:18 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | exceptional return of require ... ocess") | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:35 | require ... ocess") | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:12:6:40 | require ... ").exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:20:6:34 | "child_process" | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:6:37:6:40 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:3 | app | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:8:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | app.pos ... T OK\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:1:10:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:5:8:8 | post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:10:8:19 | '/profile' | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:27 | upload | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:34 | upload.single | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | exceptional return of upload. ... vatar') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:22:8:44 | upload. ... vatar') | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:29:8:34 | single | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | CalleeFlexibleAccessPath | upload.single |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | calleeImports | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:36:8:43 | 'avatar' | receiverName | upload |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:8:46 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:47:10:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:57:8:59 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:62:8:64 | res | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:8:67:8:70 | next | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:6 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exceptional return of exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:3:9:40 | exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:15 | "touch " | stringConcatenatedWith |  -endpoint- req.file.originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:8:9:39 | "touch  ... nalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:21 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:26 | req.file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:19:9:39 | req.fil ... nalname | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:23:9:26 | file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | enclosingFunctionBody | req res next exec touch  req file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:9:28:9:39 | originalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:3 | app | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:12:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ...   })\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | app.pos ...   })\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ...   })\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:1:16:2 | exceptional return of app.pos ...   })\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:5:12:8 | post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:10:12:25 | '/photos/upload' | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:33 | upload | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:39 | upload.array | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | exceptional return of upload. ... s', 12) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:28:12:53 | upload. ... s', 12) | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:35:12:39 | array | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | CalleeFlexibleAccessPath | upload.array |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | calleeImports | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:41:12:48 | 'photos' | receiverName | upload |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | CalleeFlexibleAccessPath | upload.array |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | calleeImports | multer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:51:12:52 | 12 | receiverName | upload |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:12:55 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | functio ... \\n  })\\n} | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:56:16:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:66:12:68 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:71:12:73 | res | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:12:76:12:79 | next | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:5 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:11 | req.files | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:13:19 | req.files.forEach | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n  }) | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | exceptional return of req.fil ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n  }) | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:3:15:4 | req.fil ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:7:13:11 | files | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:13:13:19 | forEach | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:20 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:13:24 | file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | CalleeFlexibleAccessPath | req.files.forEach |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | file => ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:13:21:15:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exceptional return of exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:5:14:38 | exec("t ... alname) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:17 | "touch " | stringConcatenatedWith |  -endpoint- file.originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:10:14:37 | "touch  ... nalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:24 | file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:21:14:37 | file.originalname | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | contextSurroundingFunctionParameters | (req, res, next)\n(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | enclosingFunctionBody | req res next req files forEach file exec touch  file originalname |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:14:26:14:37 | originalname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:8 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:5:19:26 | http =  ... 'http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:18 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | exceptional return of require('http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:12:19:26 | require('http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:19:20:19:25 | 'http' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:10 | Busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy  ... usboy') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy  ... usboy') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:5:20:30 | Busboy  ... usboy') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:20 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | exceptional return of require('busboy') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:14:20:30 | require('busboy') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:20:22:20:29 | 'busboy' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:4 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:22:17 | http.createServer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | exceptional return of http.cr ... oy);\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:2 | http.cr ... oy);\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:9 | http.cr ... .listen | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | exceptional return of http.cr ... n(8000) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:1:28:15 | http.cr ... n(8000) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:6:22:17 | createServer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | Busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:22:18 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | functio ... boy);\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:19:28:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:29:22:31 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:22:34:22:36 | res | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:12 | busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy  ... ders }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy  ... ders }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy  ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy  ... ders }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:7:23:51 | busboy  ... ders }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | exceptional return of new Bus ... ders }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:16:23:51 | new Bus ... ders }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:20:23:25 | Busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | CalleeFlexibleAccessPath | Busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | calleeImports | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:27:23:50 | { heade ... aders } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:35 | headers | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:29:23:48 | headers: req.headers | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:40 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | CalleeFlexibleAccessPath | Busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | InputAccessPathFromCallee | ?.headers |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | assignedToPropName | headers |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | calleeImports | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:38:23:48 | req.headers | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:23:42:23:48 | headers | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:8 | busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:24:11 | busboy.on | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n  }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | busboy. ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n  }) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:3:26:4 | exceptional return of busboy. ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:10:24:11 | on | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | CalleeFlexibleAccessPath | busboy.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | calleeImports | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:13:24:18 | 'file' | receiverName | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:24:20 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | CalleeFlexibleAccessPath | busboy.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | calleeImports | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | functio ...  OK\\n  } | receiverName | busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:21:26:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:31:24:39 | fieldname | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:42:24:45 | file | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:48:24:55 | filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:58:24:65 | encoding | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:24:68:24:75 | mimetype | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exceptional return of exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:5:25:29 | exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:17 | "touch " | stringConcatenatedWith |  -endpoint- filename |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:10:25:28 | "touch " + filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | contextSurroundingFunctionParameters | (req, res)\n(fieldname, file, filename, encoding, mimetype) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:25:21:25:28 | filename | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:5 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:10 | req.pipe | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | exceptional return of req.pipe(busboy) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:3:27:18 | req.pipe(busboy) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:7:27:10 | pipe | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | CalleeFlexibleAccessPath | req.pipe |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | enclosingFunctionBody | req res busboy Busboy headers req headers busboy on file fieldname file filename encoding mimetype exec touch  filename req pipe busboy |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:27:12:27:17 | busboy | receiverName | req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:4:28:9 | listen | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | CalleeFlexibleAccessPath | http.createServer().listen |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:28:11:28:14 | 8000 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:16 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formida ... dable') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:7:31:40 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:26 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | exceptional return of require ... dable') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:20:31:40 | require ... dable') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:31:28:31:39 | 'formidable' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:3 | app | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:32:8 | app.post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | app.pos ...  });\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:1:43:2 | exceptional return of app.pos ...  });\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:5:32:8 | post | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:10:32:22 | '/api/upload' | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:32:24 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:25:43:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:26:32:28 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:31:32:33 | res | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:32:36:32:39 | next | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:10 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form =  ... true }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form =  ... true }) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form =  ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form =  ... true }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:7:33:44 | form =  ... true }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:23 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | exceptional return of formida ... true }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:14:33:44 | formida ... true }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | CalleeFlexibleAccessPath | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:25:33:43 | { multiples: true } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:35 | multiples | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:27:33:41 | multiples: true | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | CalleeFlexibleAccessPath | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | InputAccessPathFromCallee | 0.multiples |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | assignedToPropName | multiples |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:33:38:33:41 | true | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:6 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:35:12 | form.parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n  }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | exceptional return of form.pa ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n  }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:3:37:4 | form.pa ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:8:35:12 | parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | CalleeFlexibleAccessPath | form.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:14:35:16 | req | receiverName | form |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:35:18 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | CalleeFlexibleAccessPath | form.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | (err, f ...  OK\\n  } | receiverName | form |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:19:37:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:20:35:22 | err | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:25:35:30 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:35:33:35:37 | files | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:5:36:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:17 | "touch " | stringConcatenatedWith |  -endpoint- fields.name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:10:36:31 | "touch  ... ds.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:26 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:21:36:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:36:28:36:31 | name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:11 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:7:39:43 | form2 = ... gForm() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | exceptional return of new for ... gForm() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:15:39:43 | new for ... gForm() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:28 | formidable | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:19:39:41 | formida ... ingForm | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:39:30:39:41 | IncomingForm | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:40:13 | form2.parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n  }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | exceptional return of form2.p ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n  }) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:3:42:4 | form2.p ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:9:40:13 | parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | CalleeFlexibleAccessPath | form2.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:15:40:17 | req | receiverName | form2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:40:19 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | CalleeFlexibleAccessPath | form2.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | calleeImports | formidable |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | (err, f ...  OK\\n  } | receiverName | form2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:20:42:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:21:40:23 | err | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:26:40:31 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:40:34:40:38 | files | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:5:41:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:17 | "touch " | stringConcatenatedWith |  -endpoint- fields.name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:10:41:31 | "touch  ... ds.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:26 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:21:41:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | contextSurroundingFunctionParameters | (req, res, next)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | enclosingFunctionBody | req res next form formidable multiples true form parse req err fields files exec touch  fields name form2 formidable IncomingForm form2 parse req err fields files exec touch  fields name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | enclosingFunctionName | app.post#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:41:28:41:31 | name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:14 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multipa ... party') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:5:45:38 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:24 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | exceptional return of require ... party') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:18:45:38 | require ... party') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:45:26:45:37 | 'multiparty' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:8 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:5:46:26 | http =  ... 'http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:18 | require | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | exceptional return of require('http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:12:46:26 | require('http') | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:46:20:46:25 | 'http' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:4 | http | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:48:17 | http.createServer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | exceptional return of http.cr ... q);\\n\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:2 | http.cr ... q);\\n\\n}) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:9 | http.cr ... .listen | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | exceptional return of http.cr ... n(8080) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:1:63:15 | http.cr ... n(8080) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:6:48:17 | createServer | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:48:18 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | functio ... eq);\\n\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:19:63:1 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:29:48:31 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:48:34:48:36 | res | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:10 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form =  ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form =  ... .Form() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form =  ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form =  ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:7:50:34 | form =  ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | exceptional return of new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:14:50:34 | new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:27 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:18:50:32 | multiparty.Form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:50:29:50:32 | Form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:6 | form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:52:12 | form.parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n  }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | exceptional return of form.pa ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n  }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:3:54:4 | form.pa ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:8:52:12 | parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | CalleeFlexibleAccessPath | form.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | calleeImports | multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:14:52:16 | req | receiverName | form |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:52:18 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | CalleeFlexibleAccessPath | form.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | calleeImports | multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | functio ...  OK\\n  } | receiverName | form |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:19:54:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:29:52:31 | err | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:34:52:39 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:52:42:52:46 | files | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exceptional return of exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:5:53:32 | exec("t ... s.name) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:17 | "touch " | stringConcatenatedWith |  -endpoint- fields.name |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:10:53:31 | "touch  ... ds.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:26 | fields | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:21:53:31 | fields.name | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | contextSurroundingFunctionParameters | (req, res)\n(err, fields, files) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:53:28:53:31 | name | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:11 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:7:57:35 | form2 = ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | exceptional return of new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:15:57:35 | new mul ... .Form() | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:28 | multiparty | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:19:57:33 | multiparty.Form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:57:30:57:33 | Form | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:58:10 | form2.on | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n  }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | exceptional return of form2.o ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n  }) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n  }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:3:60:4 | form2.o ... OK\\n  }) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:9:58:10 | on | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | CalleeFlexibleAccessPath | form2.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | calleeImports | multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:12:58:17 | 'part' | receiverName | form2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:58:19 | this | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | 'arguments' object of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | exceptional return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | CalleeFlexibleAccessPath | form2.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | calleeImports | multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | functio ...  OK\\n  } | receiverName | form2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:20:60:3 | return of anonymous function | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:58:30:58:33 | part | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:8 | exec | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exceptional return of exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:5:59:34 | exec("t ... lename) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:17 | "touch " | stringConcatenatedWith |  -endpoint- part.filename |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:10:59:33 | "touch  ... ilename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:24 | part | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:21:59:33 | part.filename | stringConcatenatedWith | 'touch ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | contextSurroundingFunctionParameters | (req, res)\n(part) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:59:26:59:33 | filename | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:7 | form2 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:13 | form2.parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | exceptional return of form2.parse(req) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:3:61:18 | form2.parse(req) | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:9:61:13 | parse | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | CalleeFlexibleAccessPath | form2.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | calleeImports | multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | enclosingFunctionBody | req res form multiparty Form form parse req err fields files exec touch  fields name form2 multiparty Form form2 on part part exec touch  part filename form2 parse req |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:61:15:61:17 | req | receiverName | form2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:4:63:9 | listen | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | CalleeFlexibleAccessPath | http.createServer().listen |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/form-parsers.js:63:11:63:14 | 8080 | fileImports | busboy child_process express formidable http multer multiparty |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:0 | this | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:1:1:1 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:8 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http =  ... "http") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http =  ... "http") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:5:1:26 | http =  ... "http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:18 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | exceptional return of require("http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:12:1:26 | require("http") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:1:20:1:25 | "http" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:7 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:5:2:24 | url = require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:17 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | exceptional return of require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:11:2:24 | require("url") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:2:19:2:23 | "url" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:4:10 | server | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server  ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:5:35:2 | server  ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:17 | http | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:4:30 | http.createServer | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:14:35:2 | http.cr ... T OK\\n}) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:19:4:30 | createServer | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | this | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:4:31 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | 'arguments' object of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | exceptional return of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:32:35:1 | return of anonymous function | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:42:4:44 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:4:47:4:49 | res | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:11 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:9:5:49 | cmd = u ... ry.path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:17 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:23 | url.parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | exceptional return of url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:38 | url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:44 | url.par ... ).query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:15:5:49 | url.par ... ry.path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:19:5:23 | parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:27 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:25:5:31 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:29:5:31 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:34:5:37 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:40:5:44 | query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:5:46:5:49 | path | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | exceptional return of require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:26 | require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:31 | require ... ").sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:5:7:36 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:13:7:25 | "cross-spawn" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:28:7:31 | sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | CalleeFlexibleAccessPath | import(!).sync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:7:33:7:35 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:26 | require ... ).shell | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | exceptional return of require ... ll(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:5:8:31 | require ... ll(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:13:8:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:22:8:26 | shell | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | CalleeFlexibleAccessPath | import(!).shell |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:8:28:8:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:30 | require ... ellSync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:5:9:35 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:13:9:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:22:9:30 | shellSync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | CalleeFlexibleAccessPath | import(!).shellSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:9:32:9:34 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:27 | require ... .stdout | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | exceptional return of require ... ut(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:5:10:32 | require ... ut(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:13:10:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:22:10:27 | stdout | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | CalleeFlexibleAccessPath | import(!).stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:10:29:10:31 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:27 | require ... .stderr | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | exceptional return of require ... rr(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:5:11:32 | require ... rr(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:13:11:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:22:11:27 | stderr | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | CalleeFlexibleAccessPath | import(!).stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:11:29:11:31 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:25 | require ... ").sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | exceptional return of require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:5:12:30 | require ... nc(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:13:12:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:22:12:25 | sync | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | CalleeFlexibleAccessPath | import(!).sync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:12:27:12:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | exceptional return of require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:26 | require ... spawn") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:5:14:31 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:13:14:25 | "cross-spawn" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:14:28:14:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | exceptional return of require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:32 | require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:5:15:37 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:13:15:31 | "cross-spawn-async" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | calleeImports | cross-spawn-async |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:15:34:15:36 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | exceptional return of require("exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:19 | require("exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | exceptional return of require("exec")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:5:16:24 | require("exec")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:13:16:18 | "exec" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:16:21:16:23 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | exceptional return of require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:25 | require ... async") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:5:17:30 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:13:17:24 | "exec-async" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | calleeImports | exec-async |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:17:27:17:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:5:18:25 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:13:18:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:18:22:18:24 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | exceptional return of require ... -exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:26 | require ... -exec") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | exceptional return of require ... t, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:5:19:39 | require ... t, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:13:19:25 | "remote-exec" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | calleeImports | remote-exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:28:19:33 | target | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | calleeImports | remote-exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:19:36:19:38 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:14 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 =  ... "ssh2") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 =  ... "ssh2") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 =  ... "ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 =  ... "ssh2") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:11:21:32 | ssh2 =  ... "ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:24 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | exceptional return of require("ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:18:21:32 | require("ssh2") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:21:26:21:31 | "ssh2" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | exceptional return of new ssh2() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:14 | new ssh2() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:19 | new ssh2().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | exceptional return of new ssh2().exec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:5:22:24 | new ssh2().exec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:9:22:12 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:16:22:19 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | CalleeFlexibleAccessPath | ssh2().exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | calleeImports | ssh2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:22:21:22:23 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | exceptional return of new ssh2.Client() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:21 | new ssh2.Client() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:26 | new ssh ... ().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | exceptional return of new ssh ... ec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:5:23:31 | new ssh ... ec(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:12 | ssh2 | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:9:23:19 | ssh2.Client | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:14:23:19 | Client | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:23:23:26 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | CalleeFlexibleAccessPath | ssh2.Client().exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | calleeImports | ssh2 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:23:28:23:30 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:20 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Str ... 2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:11:25:57 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:30 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | exceptional return of require ... reams") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:46 | require ... reams") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:24:25:57 | require ... 2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:32:25:45 | "ssh2-streams" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:25:48:25:57 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | exceptional return of new SSH2Stream() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:20 | new SSH2Stream() | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:25 | new SSH ... ().exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | exceptional return of new SSH ... e, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:5:26:37 | new SSH ... e, cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:9:26:18 | SSH2Stream | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:22:26:25 | exec | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | CalleeFlexibleAccessPath | SSH2Stream().exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | calleeImports | ssh2-streams |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:27:26:31 | false | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | CalleeFlexibleAccessPath | SSH2Stream().exec |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | calleeImports | ssh2-streams |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:26:34:26:36 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | exceptional return of require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:20 | require("execa") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:25 | require ... ").node | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | exceptional return of require ... de(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:5:28:30 | require ... de(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:13:28:19 | "execa" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:22:28:25 | node | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | CalleeFlexibleAccessPath | import(!).node |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:28:27:28:29 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:11 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | exceptional return of require ... child") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:31 | require ... child") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | exceptional return of require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:5:30:36 | require ... ")(cmd) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:13:30:30 | "foreground-child" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | calleeImports | foreground-child |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:30:33:30:35 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:16 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener  ... pener") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener  ... pener") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener  ... pener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener  ... pener") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:11:32:36 | opener  ... pener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:26 | require | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | exceptional return of require("opener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:20:32:36 | require("opener") | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:32:28:32:35 | "opener" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:10 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | exceptional return of opener( ... y.user) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:5:33:70 | opener( ... y.user) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:31 | "http://github.com/" | stringConcatenatedWith |  -endpoint- url.parse().query.user |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | CalleeFlexibleAccessPath | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | calleeImports | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:12:33:69 | "http:/ ... ry.user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:37 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:43 | url.parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | exceptional return of url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:58 | url.par ... , true) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:64 | url.par ... ).query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:35:33:69 | url.par ... ry.user | stringConcatenatedWith | 'http://github.com/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:39:33:43 | parse | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:47 | req | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:45:33:51 | req.url | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:49:33:51 | url | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | calleeImports | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:54:33:57 | true | receiverName | url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:60:33:64 | query | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:33:66:33:69 | user | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:10 | opener | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ...  cmd }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ...  cmd }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ...  cmd }) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ...  cmd }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | exceptional return of opener( ...  cmd }) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ...  cmd }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ...  cmd }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ...  cmd }) | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ...  cmd }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:5:34:49 | opener( ...  cmd }) | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | CalleeFlexibleAccessPath | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | calleeImports | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:12:34:30 | "http://github.com" | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | CalleeFlexibleAccessPath | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | calleeImports | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:33:34:48 | { command: cmd } | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:41 | command | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:35:34:46 | command: cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | CalleeFlexibleAccessPath | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | InputAccessPathFromCallee | 1.command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | assignedToPropName | command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | calleeImports | opener |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | enclosingFunctionBody | req res cmd url parse req url true query path require cross-spawn sync cmd require execa shell cmd require execa shellSync cmd require execa stdout cmd require execa stderr cmd require execa sync cmd require cross-spawn cmd require cross-spawn-async cmd require exec cmd require exec-async cmd require execa cmd require remote-exec target cmd ssh2 require ssh2 ssh2 exec cmd ssh2 Client exec cmd SSH2Stream require ssh2-streams SSH2Stream SSH2Stream exec false cmd require execa node cmd require foreground-child cmd opener require opener opener http://github.com/ url parse req url true query user opener http://github.com command cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/other.js:34:44:34:46 | cmd | fileImports | cross-spawn cross-spawn-async exec exec-async execa foreground-child http opener remote-exec ssh2 ssh2-streams url |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:0 | this | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | cp | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:1:1:1 | require | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:9 | https | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:5:1:28 | https = ... https") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:19 | require | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | exceptional return of require("https") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:13:1:28 | require("https") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:1:21:1:27 | "https" | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:6 | cp | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:5:2:33 | cp = re ... ocess") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:16 | require | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | exceptional return of require ... ocess") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:10:2:33 | require ... ocess") | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:2:18:2:32 | "child_process" | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:5 | https | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:4:9 | https.get | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ...    })\\n) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ...    })\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | exceptional return of https.g ...    })\\n) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ...    })\\n) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ...    })\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:1:8:1 | https.g ...    })\\n) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:7:4:9 | get | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | CalleeFlexibleAccessPath | https.get |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | calleeImports | https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:11:4:39 | "https: ... ommand" | receiverName | https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:4:44 | res | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | 'arguments' object of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | exceptional return of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | CalleeFlexibleAccessPath | https.get |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | calleeImports | https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | res =>\\n ... \\n    }) | receiverName | https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:4:42:7:6 | return of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:7 | res | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:5:10 | res.on | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n    }) | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n    }) | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | exceptional return of res.on( ... \\n    }) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n    }) | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n    }) | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n    }) | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:5:7:6 | res.on( ... \\n    }) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:9:5:10 | on | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | CalleeFlexibleAccessPath | res.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | contextSurroundingFunctionParameters | (res) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:12:5:17 | "data" | receiverName | res |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:19 | cp | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:5:26 | command | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | 'arguments' object of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | CalleeFlexibleAccessPath | res.on |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | command ... ;\\n    } | receiverName | res |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | exceptional return of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:5:20:7:5 | return of anonymous function | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:10 | cp | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:19 | cp.execSync | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | cp.execSync(command) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:9:6:28 | exceptional return of cp.execSync(command) | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:12:6:19 | execSync | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | contextSurroundingFunctionParameters | (res)\n(command) |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | enclosingFunctionBody | res res on data command cp execSync command |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | enclosingFunctionName | https.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | fileImports | child_process https |
| autogenerated/ShellCommandInjectionFromEnvironment/CommandInjection/third-party-command-injection.js:6:21:6:27 | command | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:0 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:1:1:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:6 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:5:1:33 | cp = re ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:16 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:10:1:33 | require ... ocess") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:1:18:1:32 | "child_process" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:1:21:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:3:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:3:2:21:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | cp.exec ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:2:4:22 | exceptional return of cp.exec ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:5:4:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:16 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:10:4:21 | process.argv | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:4:18:4:21 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:2:5:25 | exceptional return of cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:5:5:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:16 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:21 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:10:5:24 | process.argv[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:18:5:21 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:5:23:5:23 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:2:6:37 | exceptional return of cp.exec ... rgv[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:5:6:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- process.argv.0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:10:6:36 | "cmd.sh ... argv[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:22:6:36 | process.argv[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:30:6:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:6:35:6:35 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | cp.exec ... rgv[1]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:2:7:37 | exceptional return of cp.exec ... rgv[1]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:5:7:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- process.argv.1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:10:7:36 | "cmd.sh ... argv[1] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:22:7:36 | process.argv[1] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:30:7:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:7:35:7:35 | 1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | cp.exec ... rgv[2]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:2:8:37 | exceptional return of cp.exec ... rgv[2]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:5:8:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- process.argv.2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:10:8:36 | "cmd.sh ... argv[2] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:28 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:33 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:22:8:36 | process.argv[2] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:30:8:33 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:8:35:8:35 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:9 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args =  ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args =  ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args =  ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args =  ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:6:10:33 | args =  ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:19 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:24 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:30 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:13:10:33 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:21:10:24 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:26:10:30 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | CalleeFlexibleAccessPath | process.argv.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:10:32:10:32 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | cp.execSync(args[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:2:11:21 | exceptional return of cp.execSync(args[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:5:11:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:17 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:14:11:20 | args[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:11:19:11:19 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:2:12:33 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:5:12:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:22 | "cmd.sh " | stringConcatenatedWith |  -endpoint- args.0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:14:12:32 | "cmd.sh " + args[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:29 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:26:12:32 | args[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:12:31:12:31 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:14 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerAr ... lice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:6:14:30 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:21 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:27 | args.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | args.slice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:18:14:30 | exceptional return of args.slice(1) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:23:14:27 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | CalleeFlexibleAccessPath | args.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:14:29:14:29 | 1 | receiverName | args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:2:15:26 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:5:15:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:22 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:14:15:25 | fewerArgs[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:15:24:15:24 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:2:16:38 | exceptional return of cp.exec ... rgs[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:5:16:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:22 | "cmd.sh " | stringConcatenatedWith |  -endpoint- fewerArgs.0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:14:16:37 | "cmd.sh ... Args[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:34 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:26:16:37 | fewerArgs[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:16:36:16:36 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:9 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:6:18:24 | arg0 = fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:21 | fewerArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:13:18:24 | fewerArgs[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:18:23:18:23 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | cp.execSync(arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:2:19:18 | exceptional return of cp.execSync(arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:5:19:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:19:14:19:17 | arg0 | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | cp.exec ... + arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:2:20:30 | exceptional return of cp.exec ... + arg0) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:5:20:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:22 | "cmd.sh " | stringConcatenatedWith |  -endpoint- arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:14:20:29 | "cmd.sh " + arg0 | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | enclosingFunctionBody | cp exec process argv cp exec process 0 argv 0 cp exec cmd.sh  process 0 argv 0 cp exec cmd.sh  process 1 argv 1 cp exec cmd.sh  process 2 argv 2 args process argv slice 2 cp execSync args 0 0 cp execSync cmd.sh  args 0 0 fewerArgs args slice 1 cp execSync fewerArgs 0 0 cp execSync cmd.sh  fewerArgs 0 0 arg0 fewerArgs 0 0 cp execSync arg0 cp execSync cmd.sh  arg0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:20:26:20:29 | arg0 | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:1:28:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:23:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:23:2:28:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:11 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args =  ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args =  ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args =  ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args =  ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:8:24:35 | args =  ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:21 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:26 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:32 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:15:24:35 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:23:24:26 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:28:24:32 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | CalleeFlexibleAccessPath | process.argv.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:24:34:24:34 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:13 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script  ... ex.js') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script  ... ex.js') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script  ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script  ... ex.js') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:8:25:56 | script  ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:20 | path | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:25 | path.join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | exceptional return of path.jo ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:17:25:56 | path.jo ... ex.js') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:22:25:25 | join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:27:25:36 | packageDir | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:39:25:43 | 'app' | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:25:46:25:55 | 'index.js' | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:2:26:51 | exceptional return of cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:5:26:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:14:26:50 | `node $ ... ption"` | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:15:26:19 | node  | stringConcatenatedWith |  -endpoint- script + ' ' + args.0 + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:22:26:27 | script | stringConcatenatedWith | 'node ' -endpoint- ' ' + args.0 + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:29:26:29 |   | stringConcatenatedWith | 'node ' + script -endpoint- args.0 + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:32:26:38 | args[0] | stringConcatenatedWith | 'node ' + script + ' ' -endpoint- ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:37:26:37 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:26:40:26:49 |  --option" | stringConcatenatedWith | 'node ' + script + ' ' + args.0 -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:12 | cp.execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:2:27:58 | exceptional return of cp.exec ... tion"`) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:5:27:12 | execSync | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:14:27:57 | `node $ ... ption"` | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:15:27:19 | node  | stringConcatenatedWith |  -endpoint- script + ' ' + args.join() + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:22:27:27 | script | stringConcatenatedWith | 'node ' -endpoint- ' ' + args.join() + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:29:27:29 |   | stringConcatenatedWith | 'node ' + script -endpoint- args.join() + ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:35 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:40 | args.join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | args.join(' ') | stringConcatenatedWith | 'node ' + script + ' ' -endpoint- ' --option"' |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:32:27:45 | exceptional return of args.join(' ') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:37:27:40 | join | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | CalleeFlexibleAccessPath | args.join |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:42:27:44 | ' ' | receiverName | args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | enclosingFunctionBody | args process argv slice 2 script path join packageDir app index.js cp execSync node  script   args 0 0  --option" cp execSync node  script   args join    --option" |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:27:47:27:56 |  --option" | stringConcatenatedWith | 'node ' + script + ' ' + args.join() -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:1:30:51 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:4:30:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:17 | "cmd.sh " | stringConcatenatedWith |  -endpoint- import(!)().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:9:30:50 | "cmd.sh ... )().foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | exceptional return of require ... -args") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:44 | require ... -args") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | exceptional return of require ... rgs")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:46 | require ... rgs")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:21:30:50 | require ... )().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:29:30:43 | "get-them-args" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:30:48:30:50 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:1:31:46 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:4:31:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:17 | "cmd.sh " | stringConcatenatedWith |  -endpoint- import(!)().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:9:31:45 | "cmd.sh ... )().foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | exceptional return of require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:39 | require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | exceptional return of require ... ist")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:41 | require ... ist")() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:21:31:45 | require ... )().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:29:31:38 | "minimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:31:43:31:45 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:1:32:46 | exceptional return of cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:4:32:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:17 | "cmd.sh " | stringConcatenatedWith |  -endpoint- import(!).argv.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:9:32:45 | "cmd.sh ... rgv.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | exceptional return of require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:36 | require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:41 | require ... ").argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:21:32:45 | require ... rgv.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:29:32:35 | "yargs" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:38:32:41 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:32:43:32:45 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:2 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:7 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:1:33:49 | exceptional return of cp.exec ... gv.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:4:33:7 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:17 | "cmd.sh " | stringConcatenatedWith |  -endpoint- import(!).argv.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:9:33:48 | "cmd.sh ... rgv.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:27 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | exceptional return of require("optimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:39 | require("optimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:44 | require ... ").argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:21:33:48 | require ... rgv.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:29:33:38 | "optimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:41:33:44 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:33:46:33:48 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:1:44:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:35:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:35:2:44:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:36:9 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args =  ... \\t\\t.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args =  ... \\t\\t.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args =  ... \\t\\t.argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args =  ... \\t\\t.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:6:39:7 | args =  ... \\t\\t.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:19 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:36:28 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:10 | require ... command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | exceptional return of require ... => { }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:37:62 | require ... => { }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:9 | require ... .option | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | exceptional return of require ... bar" }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:38:36 | require ... bar" }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:13:39:7 | require ... \\t\\t.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:36:21:36:27 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:4:37:10 | command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | CalleeFlexibleAccessPath | import(!).command |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:12:37:25 | 'serve [port]' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | CalleeFlexibleAccessPath | import(!).command |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:28:37:45 | 'start the server' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | CalleeFlexibleAccessPath | import(!).command |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | contextSurroundingFunctionParameters | ()\n(yargs) |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | (yargs) => { } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:48:37:61 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | contextSurroundingFunctionParameters | ()\n(yargs) |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:37:49:37:53 | yargs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:4:38:9 | option | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | CalleeFlexibleAccessPath | import(!).command().option |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:11:38:19 | 'verbose' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | CalleeFlexibleAccessPath | import(!).command().option |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:22:38:35 | { foo: "bar" } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:26 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:24:38:33 | foo: "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | CalleeFlexibleAccessPath | import(!).command().option |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | InputAccessPathFromCallee | 1.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:38:29:38:33 | "bar" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:39:4:39:7 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:2:41:26 | exceptional return of cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:5:41:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:10:41:25 | "cmd.sh " + args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:41:22:41:25 | args | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:2:43:63 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:5:43:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- import(!).array().parse().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:10:43:62 | "cmd.sh ... e().foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | exceptional return of require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:37 | require("yargs") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:43 | require ... ).array | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | exceptional return of require ... ("foo") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:50 | require ... ("foo") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:56 | require ... ).parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | exceptional return of require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:58 | require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:22:43:62 | require ... e().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:30:43:36 | "yargs" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:39:43:43 | array | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | CalleeFlexibleAccessPath | import(!).array |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:45:43:49 | "foo" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:52:43:56 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | enclosingFunctionBody | args require yargs command serve [port] start the server yargs option verbose foo bar argv cp exec cmd.sh  args cp exec cmd.sh  require yargs array foo parse foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:43:60:43:62 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:1:73:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:46:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:46:2:73:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:51:2 | {\\n\\t\\targ ... \\t\\t},\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:47:8:53:12 | {\\n\\t\\targ ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:48:6 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:3:50:3 | argv: { ... rgs\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:48:9:50:3 | {\\n\\t\\t\\t...args\\n\\t\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | ...args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:49:7:49:10 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:12 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:51:21 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:8 | require ... \\t.usage | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | exceptional return of require ... o bar') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:52:26 | require ... o bar') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:10 | require ... command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | exceptional return of require ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:6:53:12 | require ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:51:14:51:20 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:4:52:8 | usage | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | CalleeFlexibleAccessPath | import(!).usage |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | calleeImports | yargs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:52:10:52:25 | 'Usage: foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:53:4:53:10 | command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:2:55:26 | exceptional return of cp.exec ... + args) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:5:55:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:10:55:25 | "cmd.sh " + args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:55:22:55:25 | args | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:13 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:6:57:37 | tainted ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:32 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:17:57:37 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:25:57:31 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:57:34:57:37 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:13 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:6:58:40 | tainted ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:32 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:38 | require ... ).parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | exceptional return of require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:17:58:40 | require ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:25:58:31 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:58:34:58:38 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:60:56 | {taint1 ... 2rest}} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:8:63:2 | {taint1 ... ted2\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:14 | taint1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:9:60:31 | taint1: ... t1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:17:60:31 | {...taint1rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | ...taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:21:60:30 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:38 | taint2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:33:60:55 | taint2: ... t2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:41:60:55 | {...taint2rest} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | ...taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:45:60:54 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:60:60:63:2 | {\\n\\t\\ttai ... ted2\\n\\t} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:8 | taint1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:3:61:18 | taint1: tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | assignedToPropName | taint1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:61:11:61:18 | tainted1 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:8 | taint2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:3:62:18 | taint2: tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | assignedToPropName | taint2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:62:11:62:18 | tainted2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | cp.exec ... t1rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:2:65:32 | exceptional return of cp.exec ... t1rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:5:65:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- taint1rest |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:10:65:31 | "cmd.sh ... nt1rest | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:65:22:65:31 | taint1rest | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | cp.exec ... t2rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:2:66:32 | exceptional return of cp.exec ... t2rest) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:5:66:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- taint2rest |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:10:66:31 | "cmd.sh ... nt2rest | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:66:22:66:31 | taint2rest | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:16 | {...taint3} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:6:68:40 | {...tai ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | ...taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:10:68:15 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:35 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:20:68:40 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:28:68:34 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:68:37:68:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | cp.exec ... taint3) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:2:69:28 | exceptional return of cp.exec ... taint3) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:5:69:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- taint3 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:10:69:27 | "cmd.sh " + taint3 | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:69:22:69:27 | taint3 | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:16 | [...taint4] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | [...tai ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:6:71:40 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | ...taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:10:71:15 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | exceptional return of require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:35 | require('yargs') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:20:71:40 | require ... ').argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:28:71:34 | 'yargs' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:71:37:71:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | cp.exec ... taint4) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:2:72:28 | exceptional return of cp.exec ... taint4) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:5:72:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:10:72:27 | "cmd.sh " + taint4 | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | enclosingFunctionBody | argv args require yargs usage Usage: foo bar command cp exec cmd.sh  args tainted1 require yargs argv tainted2 require yargs parse taint1 taint1rest taint2 taint2rest taint1 tainted1 taint2 tainted2 cp exec cmd.sh  taint1rest cp exec cmd.sh  taint2rest taint3 require yargs argv cp exec cmd.sh  taint3 taint4 require yargs argv cp exec cmd.sh  taint4 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:72:22:72:27 | taint4 | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:93:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:1:103:2 | exceptional return of (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:75:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:75:2:93:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:11 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv =  ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv =  ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv =  ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv =  ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:8:76:35 | argv =  ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:21 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:26 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:32 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:23:76:26 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:28:76:32 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | CalleeFlexibleAccessPath | process.argv.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:76:34:76:34 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:13 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimis ... imist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:6:78:35 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | exceptional return of require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:17:78:35 | require("minimist") | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:78:25:78:34 | "minimist" | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | cp.exec ... v).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:2:79:40 | exceptional return of cp.exec ... v).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:5:79:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- minimist().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:29 | minimist | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | exceptional return of minimist(argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:22:79:39 | minimist(argv).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | CalleeFlexibleAccessPath | minimist |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | calleeImports | minimist |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:31:79:34 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:79:37:79:39 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:11 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg  ... ubarg') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg  ... ubarg') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg  ... ubarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg  ... ubarg') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:6:81:31 | subarg  ... ubarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:21 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | exceptional return of require('subarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:15:81:31 | require('subarg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:81:23:81:30 | 'subarg' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:2:82:55 | exceptional return of cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:5:82:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- subarg().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:27 | subarg | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | exceptional return of subarg( ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:22:82:54 | subarg( ... 2)).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:35 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:40 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:46 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | CalleeFlexibleAccessPath | subarg |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | calleeImports | subarg |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:37:82:40 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:42:82:46 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | CalleeFlexibleAccessPath | process.argv.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:48:82:48 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:82:52:82:54 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:16 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsPa ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:6:84:42 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:26 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | exceptional return of require ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:20:84:42 | require ... arser') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:84:28:84:41 | 'yargs-parser' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:2:85:60 | exceptional return of cp.exec ... )).foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:5:85:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- yargsParser().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:32 | yargsParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | exceptional return of yargsPa ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:22:85:59 | yargsPa ... 2)).foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:40 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:45 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:51 | process.argv.slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | exceptional return of process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | CalleeFlexibleAccessPath | yargsParser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | calleeImports | yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:42:85:45 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:47:85:51 | slice | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | CalleeFlexibleAccessPath | process.argv.slice |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:53:85:53 | 2 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:85:57:85:59 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import  ...  'args' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import  ...  'args' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import  ...  'args' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import  ...  'args' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:2:87:24 | import  ...  'args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:9:87:12 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:87:19:87:24 | 'args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:10 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:6:88:37 | flags = ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:17 | args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:23 | args.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:14:88:37 | exceptional return of args.pa ... s.argv) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:19:88:23 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:31 | process | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | CalleeFlexibleAccessPath | args.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | calleeImports | args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:25:88:36 | process.argv | receiverName | args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:88:33:88:36 | argv | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:2:89:31 | exceptional return of cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:5:89:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- flags.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:26 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:22:89:30 | flags.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:89:28:89:30 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:10 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:6:91:38 | flags = ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:20 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | exceptional return of require('arg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:27 | require('arg') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | exceptional return of require ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:22:91:26 | 'arg' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | calleeImports | arg |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:29:91:37 | {...spec} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | InputAccessPathFromCallee | 0.? |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | calleeImports | arg |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:30:91:36 | ...spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:91:33:91:36 | spec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:2:92:31 | exceptional return of cp.exec ... gs.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:5:92:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- flags.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:10:92:30 | "cmd.sh ... ags.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:26 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:22:92:30 | flags.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | enclosingFunctionBody | argv process argv slice 2 minimist require minimist cp exec cmd.sh  minimist argv foo subarg require subarg cp exec cmd.sh  subarg process argv slice 2 foo yargsParser require yargs-parser cp exec cmd.sh  yargsParser process argv slice 2 foo args args flags args parse process argv cp exec cmd.sh  flags foo flags require arg spec cp exec cmd.sh  flags foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:92:28:92:30 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:95:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:95:2:103:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:25 | { ArgumentParser } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:8:96:47 | { Argum ... parse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:10:96:23 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:35 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | exceptional return of require('argparse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:29:96:47 | require('argparse') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:96:37:96:46 | 'argparse' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:13 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser  ... mple'}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser  ... mple'}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser  ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser  ... mple'}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:8:98:69 | parser  ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | exceptional return of new Arg ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:17:98:69 | new Arg ... mple'}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:21:98:34 | ArgumentParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | CalleeFlexibleAccessPath | ArgumentParser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:36:98:68 | {descri ... ample'} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:47 | description | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:37:98:67 | descrip ... xample' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | CalleeFlexibleAccessPath | ArgumentParser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | InputAccessPathFromCallee | ?.description |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | assignedToPropName | description |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:98:50:98:67 | 'Argparse example' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:7 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:20 | parser.add_argument | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | exceptional return of parser. ... bar' }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:2:100:56 | parser. ... bar' }) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:9:100:20 | add_argument | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | CalleeFlexibleAccessPath | parser.add_argument |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:22:100:25 | '-f' | receiverName | parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | CalleeFlexibleAccessPath | parser.add_argument |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:28:100:34 | '--foo' | receiverName | parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | CalleeFlexibleAccessPath | parser.add_argument |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:37:100:55 | { help: 'foo bar' } | receiverName | parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:42 | help | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:39:100:53 | help: 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | CalleeFlexibleAccessPath | parser.add_argument |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | InputAccessPathFromCallee | 2.help |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | assignedToPropName | help |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | calleeImports | argparse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:100:45:100:53 | 'foo bar' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:2:102:45 | exceptional return of cp.exec ... ().foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:5:102:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- parser.parse_args().foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:10:102:44 | "cmd.sh ... s().foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:27 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:38 | parser.parse_args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | exceptional return of parser.parse_args() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:40 | parser.parse_args() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:22:102:44 | parser. ... s().foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:29:102:38 | parse_args | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | enclosingFunctionBody | ArgumentParser require argparse parser ArgumentParser description Argparse example parser add_argument -f --foo help foo bar cp exec cmd.sh  parser parse_args foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:102:42:102:44 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:1:109:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:105:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:105:2:109:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:22 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | command ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:8:106:53 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:32 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | exceptional return of require ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:26:106:53 | require ... -args') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:106:34:106:52 | 'command-line-args' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:14 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:8:107:51 | options ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:32 | commandLineArgs | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | command ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:18:107:51 | exceptional return of command ... itions) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | CalleeFlexibleAccessPath | commandLineArgs |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | calleeImports | command-line-args |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:107:34:107:50 | optionDefinitions | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | cp.exec ... ns.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:2:108:33 | exceptional return of cp.exec ... ns.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:5:108:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- options.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:10:108:32 | "cmd.sh ... ons.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:28 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:22:108:32 | options.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | enclosingFunctionBody | commandLineArgs require command-line-args options commandLineArgs optionDefinitions cp exec cmd.sh  options foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:108:30:108:32 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:1:117:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:111:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:111:2:117:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:11 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow =  ... 'meow') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow =  ... 'meow') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow =  ... 'meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow =  ... 'meow') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:8:112:29 | meow =  ... 'meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:21 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | exceptional return of require('meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:15:112:29 | require('meow') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:112:23:112:28 | 'meow' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:10 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:8:114:52 | cli = m ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:17 | meow | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | exceptional return of meow(`h ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:14:114:52 | meow(`h ... lags}}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | CalleeFlexibleAccessPath | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | calleeImports | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:19:114:30 | `helpstring` | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:20:114:29 | helpstring | stringConcatenatedWith |  -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | CalleeFlexibleAccessPath | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | calleeImports | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:33:114:51 | {flags: {...flags}} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:38 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:34:114:50 | flags: {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | CalleeFlexibleAccessPath | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | InputAccessPathFromCallee | 1.flags |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | assignedToPropName | flags |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | calleeImports | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:41:114:50 | {...flags} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | CalleeFlexibleAccessPath | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | InputAccessPathFromCallee | 1.flags.? |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | calleeImports | meow |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:42:114:49 | ...flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:114:45:114:49 | flags | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | cp.exec ... put[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:2:116:34 | exceptional return of cp.exec ... put[0]) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:5:116:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- cli.input.0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:10:116:33 | "cmd.sh ... nput[0] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:24 | cli | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:30 | cli.input | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:22:116:33 | cli.input[0] | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:26:116:30 | input | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | enclosingFunctionBody | meow require meow cli meow helpstring flags flags cp exec cmd.sh  cli 0 input 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:116:32:116:32 | 0 | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:1:130:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:119:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:119:2:130:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:13 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdas ... hdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:6:120:35 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:23 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | exceptional return of require('dashdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:17:120:35 | require('dashdash') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:120:25:120:34 | 'dashdash' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:9 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts =  ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts =  ... tions}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts =  ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts =  ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:6:122:46 | opts =  ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:20 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:26 | dashdash.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:13:122:46 | exceptional return of dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:22:122:26 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | CalleeFlexibleAccessPath | dashdash.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | calleeImports | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:28:122:45 | {options: options} | receiverName | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:35 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:29:122:44 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | CalleeFlexibleAccessPath | dashdash.parse |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | InputAccessPathFromCallee | 0.options |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | assignedToPropName | options |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | calleeImports | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:122:38:122:44 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:2:124:30 | exceptional return of cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:5:124:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- opts.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:10:124:29 | "cmd.sh " + opts.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:25 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:22:124:29 | opts.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:124:27:124:29 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:11 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser  ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser  ... tions}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser  ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser  ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:6:126:55 | parser  ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:22 | dashdash | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:35 | dashdas ... eParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:15:126:55 | exceptional return of dashdas ... tions}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:24:126:35 | createParser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | CalleeFlexibleAccessPath | dashdash.createParser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | calleeImports | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:37:126:54 | {options: options} | receiverName | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:44 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:38:126:53 | options: options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | CalleeFlexibleAccessPath | dashdash.createParser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | InputAccessPathFromCallee | 0.options |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | assignedToPropName | options |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | calleeImports | dashdash |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:126:47:126:53 | options | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:9 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts =  ... parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts =  ... parse() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts =  ... parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts =  ... parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:6:127:26 | opts =  ... parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:18 | parser | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:24 | parser.parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | exceptional return of parser.parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:13:127:26 | parser.parse() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:127:20:127:24 | parse | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:2:129:30 | exceptional return of cp.exec ... ts.foo) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:5:129:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- opts.foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:10:129:29 | "cmd.sh " + opts.foo | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:25 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:22:129:29 | opts.foo | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | enclosingFunctionBody | dashdash require dashdash opts dashdash parse options options cp exec cmd.sh  opts foo parser dashdash createParser options options opts parser parse cp exec cmd.sh  opts foo |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:129:27:129:29 | foo | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:1:138:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:132:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:132:2:138:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:18 | { program } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:8:133:41 | { progr ... ander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:10:133:16 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | exceptional return of require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:22:133:41 | require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:133:30:133:40 | 'commander' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:8 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:16 | program.version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | exceptional return of program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:2:134:25 | program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:10:134:16 | version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | CalleeFlexibleAccessPath | program.version |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | calleeImports | commander |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:134:18:134:24 | '0.0.1' | receiverName | program |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:2:136:46 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:5:136:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- program.opts().pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:10:136:45 | "cmd.sh ... zzaType | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:33 | program.opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | exceptional return of program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:35 | program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:22:136:45 | program ... zzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:30:136:33 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:136:37:136:45 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:2:137:39 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:5:137:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- program.pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:10:137:38 | "cmd.sh ... zzaType | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:22:137:38 | program.pizzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | enclosingFunctionBody | program require commander program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:137:30:137:38 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:1:147:2 | (functi ... T OK\\n}) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:140:1 | this | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | 'arguments' object of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | exceptional return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | functio ... OT OK\\n} | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:140:2:147:1 | return of anonymous function | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:18 | { Command } | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:8:141:41 | { Comma ... ander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:10:141:16 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:28 | require | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | exceptional return of require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:22:141:41 | require('commander') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:141:30:141:40 | 'commander' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:14 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:8:142:30 | program ... mmand() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | exceptional return of new Command() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:18:142:30 | new Command() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:142:22:142:28 | Command | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:8 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:16 | program.version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | exceptional return of program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:2:143:25 | program ... 0.0.1') | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:10:143:16 | version | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | CalleeFlexibleAccessPath | program.version |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | calleeImports | commander |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:143:18:143:24 | '0.0.1' | receiverName | program |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:2:145:46 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:5:145:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- program.opts().pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:10:145:45 | "cmd.sh ... zzaType | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:33 | program.opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | exceptional return of program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:35 | program.opts() | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:22:145:45 | program ... zzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:30:145:33 | opts | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:145:37:145:45 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:3 | cp | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:8 | cp.exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:2:146:39 | exceptional return of cp.exec ... zaType) | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:5:146:8 | exec | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:18 | "cmd.sh " | stringConcatenatedWith |  -endpoint- program.pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:10:146:38 | "cmd.sh ... zzaType | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:28 | program | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:22:146:38 | program.pizzaType | stringConcatenatedWith | 'cmd.sh ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | enclosingFunctionBody | Command require commander program Command program version 0.0.1 cp exec cmd.sh  program opts pizzaType cp exec cmd.sh  program pizzaType |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/IndirectCommandInjection/command-line-parameter-command-injection.js:146:30:146:38 | pizzaType | fileImports | arg argparse args child_process command-line-args commander dashdash get-them-args meow minimist optimist subarg yargs yargs-parser |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:0 | this | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:1:1:1 | require | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:13 | express | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:7:1:34 | express ... press") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:23 | require | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | exceptional return of require("express") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:17:1:34 | require("express") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:1:25:1:33 | "express" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:9 | app | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:7:2:21 | app = express() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:19 | express | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | exceptional return of express() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:2:13:2:21 | express() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:18 | { execFile } | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:7:3:45 | { execF ... ocess") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:9:3:16 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:28 | require | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | exceptional return of require ... ocess") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:22:3:45 | require ... ocess") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:3:30:3:44 | "child_process" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:3 | app | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:5:7 | app.get | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | app.get ... / OK\\n}) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:1:47:2 | exceptional return of app.get ... / OK\\n}) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:5:5:7 | get | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | CalleeFlexibleAccessPath | app.get |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:9:5:11 | "/" | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:5:13 | indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:14:47:1 | return of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:15:5:17 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:5:20:5:22 | res | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:14 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote  ... .remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote  ... .remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote  ... .remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote  ... .remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:9:6:33 | remote  ... .remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:20 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:26 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:18:6:33 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:22:6:26 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:6:28:6:33 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | exceptional return of execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:3:7:40 | execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:12:7:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:19:7:39 | ["ls-re ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:20:7:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:7:33:7:38 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | exceptional return of execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:3:9:36 | execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:12:9:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:19:9:35 | ["fetch", remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:20:9:26 | "fetch" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:9:29:9:34 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:10 | indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | exceptional return of indirec ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:3:11:40 | indirec ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | CalleeFlexibleAccessPath | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:12:11:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | CalleeFlexibleAccessPath | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:19:11:39 | ["ls-re ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:20:11:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:11:33:11:38 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:14 | myArgs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs  ... ry.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs  ... ry.args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs  ... ry.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs  ... ry.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:9:13:31 | myArgs  ... ry.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:20 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:26 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:18:13:31 | req.query.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:22:13:26 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:13:28:13:31 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | exceptional return of execFil ... myArgs) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:3:15:25 | execFil ... myArgs) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:12:15:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:15:19:15:24 | myArgs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:12 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:23 | remote.startsWith | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | exceptional return of remote. ... h("--") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:7:17:29 | remote. ... h("--") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:14:17:23 | startsWith | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | CalleeFlexibleAccessPath | remote.startsWith |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:17:25:17:28 | "--" | receiverName | remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:12 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:5:18:50 | execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:14:18:18 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:21:18:49 | ["ls-re ... "HEAD"] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:22:18:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:35:18:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:18:43:18:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:12 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:5:20:50 | execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:14:20:18 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:21:20:49 | ["ls-re ... "HEAD"] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:22:20:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:35:20:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:20:43:20:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:12 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:23 | remote.startsWith | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | exceptional return of remote. ... "git@") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:7:23:31 | remote. ... "git@") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:14:23:23 | startsWith | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | CalleeFlexibleAccessPath | remote.startsWith |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:23:25:23:30 | "git@" | receiverName | remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:12 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:5:24:50 | execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:14:24:18 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:21:24:49 | ["ls-re ... "HEAD"] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:22:24:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:35:24:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:24:43:24:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:12 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | exceptional return of execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:5:26:50 | execFil ... HEAD"]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:14:26:18 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:21:26:49 | ["ls-re ... "HEAD"] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:22:26:32 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:35:26:40 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:26:43:26:48 | "HEAD" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | exceptional return of execFil ... y.args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:3:29:33 | execFil ... y.args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:12:29:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:21 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:27 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:19:29:32 | req.query.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:23:29:27 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:29:29:29:32 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | exceptional return of execFil ... .args]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:3:31:42 | execFil ... .args]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:12:31:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:19:31:41 | ["add", ... y.args] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:20:31:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:29 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:35 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:27:31:40 | req.query.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:31:31:35 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:31:37:31:40 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | exceptional return of execFil ... gs()])) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:3:33:66 | execFil ... gs()])) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:12:33:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:43 | ["add", ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:50 | ["add", ... .concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | ["add", ... rgs()]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:19:33:65 | exceptional return of ["add", ... rgs()]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:20:33:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:29 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:35 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:27:33:42 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:31:33:35 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:37:33:42 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:45:33:50 | concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:52:33:64 | [otherargs()] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:61 | otherargs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | exceptional return of otherargs() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:33:53:33:63 | otherargs() | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | exceptional return of execFil ... rArgs)) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:3:35:78 | execFil ... rArgs)) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:12:35:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:49 | ["ls-re ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:56 | ["ls-re ... .concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | ["ls-re ... erArgs) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:19:35:77 | exceptional return of ["ls-re ... erArgs) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:20:35:30 | "ls-remote" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:35 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:41 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:33:35:48 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:37:35:41 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:43:35:48 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:51:35:56 | concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:60 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:66 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:58:35:76 | req.query.otherArgs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:62:35:66 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:35:68:35:76 | otherArgs | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | exceptional return of execFil ... rable)) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:3:37:65 | execFil ... rable)) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:12:37:16 | "git" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:32 | ["add", "fpp"] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:39 | ["add", ... .concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | ["add", ... erable) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:19:37:64 | exceptional return of ["add", ... erable) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:20:37:24 | "add" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:27:37:31 | "fpp" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:34:37:39 | concat | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:43 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:49 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:41:37:63 | req.que ... nerable | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:45:37:49 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:37:51:37:63 | notVulnerable | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | exceptional return of execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:3:40:45 | execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:12:40:15 | "hg" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:18:40:44 | ["clone ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:19:40:25 | "clone" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:30 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:36 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:28:40:43 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:32:40:36 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:40:38:40:43 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | exceptional return of execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:3:42:48 | execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:12:42:15 | "hg" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:18:42:47 | ["whate ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:19:42:28 | "whatever" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:33 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:39 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:31:42:46 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:35:42:39 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:42:41:42:46 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | exceptional return of execFil ... y.args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:3:44:32 | execFil ... y.args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:12:44:15 | "hg" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:20 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:26 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:18:44:31 | req.query.args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:22:44:26 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:44:28:44:31 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | exceptional return of execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:3:46:51 | execFil ... emote]) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:12:46:15 | "hg" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:18:46:50 | ["clone ... remote] | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:19:46:25 | "clone" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:28:46:31 | "--" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:36 | req | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:42 | req.query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:34:46:49 | req.query.remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:38:46:42 | query | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | enclosingFunctionBody | req res remote req query remote execFile git ls-remote remote execFile git fetch remote indirect git ls-remote remote myArgs req query args execFile git myArgs remote startsWith -- execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD remote startsWith git@ execFile git ls-remote remote HEAD execFile git ls-remote remote HEAD execFile git req query args execFile git add req query args execFile git add req query remote concat otherargs execFile git ls-remote req query remote concat req query otherArgs execFile git add fpp concat req query notVulnerable execFile hg clone req query remote execFile hg whatever req query remote execFile hg req query args execFile hg clone -- req query remote |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | enclosingFunctionName | app.get#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:46:44:46:49 | remote | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:49:0 | this | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | 'arguments' object of function indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | exceptional return of function indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ...  here\\n} | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ...  here\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | functio ...  here\\n} | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:1:51:1 | return of function indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:10:49:17 | indirect | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:19:49:21 | cmd | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:49:24:49:27 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:10 | execFile | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | exceptional return of execFile(cmd, args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:3:50:21 | execFile(cmd, args) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:12:50:14 | cmd | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | contextSurroundingFunctionParameters | (cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | enclosingFunctionBody | cmd args execFile cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:50:17:50:20 | args | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:3 | app | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:10 | app.listen | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | app.lis ... 000!")) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:1:53:74 | exceptional return of app.lis ... 000!")) | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:5:53:10 | listen | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | CalleeFlexibleAccessPath | app.listen |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:12:53:15 | 3000 | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | CalleeFlexibleAccessPath | app.listen |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | calleeImports | express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | () => c ... 3000!") | receiverName | app |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:18:53:73 | return of anonymous function | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:30 | console | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:34 | console.log | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | console ... 3000!") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:24:53:73 | exceptional return of console ... 3000!") | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:32:53:34 | log | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | contextFunctionInterfaces | indirect(cmd, args) |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | enclosingFunctionBody | console log Example app listening on port 3000! |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | enclosingFunctionName | app.listen#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | fileImports | child_process express |
| autogenerated/ShellCommandInjectionFromEnvironment/SecondOrderCommandInjection/second-order.js:53:36:53:72 | "Exampl ...  3000!" | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:0 | this | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:1:1:1 | require | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:6 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:5:1:33 | cp = re ... ocess') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:16 | require | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | exceptional return of require ... ocess') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:10:1:33 | require ... ocess') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:1:18:1:32 | 'child_process' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:8 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path =  ... 'path') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path =  ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:5:2:26 | path =  ... 'path') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:18 | require | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | exceptional return of require('path') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:12:2:26 | require('path') | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:2:20:2:25 | 'path' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:9 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:5:3:28 | execa = ... execa") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:19 | require | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | exceptional return of require("execa") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:13:3:28 | require("execa") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:3:21:3:27 | "execa" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:1:13:2 | (functi ... / OK\\n}) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:4:1 | this | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | 'arguments' object of anonymous function | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | exceptional return of anonymous function | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | functio ... // OK\\n} | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:4:2:13:1 | return of anonymous function | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:3 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:16 | cp.execFileSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | cp.exec ... emp")]) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:2:5:62 | exceptional return of cp.exec ... emp")]) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:5:5:16 | execFileSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:18:5:21 | 'rm' | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:25:5:61 | ['-rf', ... temp")] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:26:5:30 | '-rf' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:36 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:41 | path.join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:33:5:60 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:38:5:41 | join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:43:5:51 | __dirname | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:5:54:5:59 | "temp" | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:3 | cp | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:12 | cp.execSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | cp.exec ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:2:6:54 | exceptional return of cp.exec ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:5:6:12 | execSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:22 | 'rm -rf ' | stringConcatenatedWith |  -endpoint- path.join() |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:14:6:53 | 'rm -rf ... "temp") | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:29 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:34 | path.join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:26:6:53 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:31:6:34 | join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:36:6:44 | __dirname | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:6:47:6:52 | "temp" | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:6 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:12 | execa.shell | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | exceptional return of execa.s ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:2:8:54 | execa.s ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:8:8:12 | shell | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:22 | 'rm -rf ' | stringConcatenatedWith |  -endpoint- path.join() |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | execa.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:14:8:53 | 'rm -rf ... "temp") | receiverName | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:29 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:34 | path.join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:26:8:53 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:31:8:34 | join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:36:8:44 | __dirname | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:8:47:8:52 | "temp" | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:6 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:16 | execa.shellSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | exceptional return of execa.s ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:2:9:58 | execa.s ... temp")) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:8:9:16 | shellSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:26 | 'rm -rf ' | stringConcatenatedWith |  -endpoint- path.join() |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | CalleeFlexibleAccessPath | execa.shellSync |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:18:9:57 | 'rm -rf ... "temp") | receiverName | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:33 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:38 | path.join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:30:9:57 | path.jo ... "temp") | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:35:9:38 | join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:40:9:48 | __dirname | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:9:51:9:56 | "temp" | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:11 | safe | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe =  ...  + "\\"" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe =  ...  + "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe =  ...  + "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe =  ...  + "\\"" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:8:11:56 | safe =  ...  + "\\"" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:18 | "\\"" | stringConcatenatedWith |  -endpoint- path.join() + '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" +  ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" +  ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" +  ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" +  ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:49 | "\\"" +  ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" +  ...  + "\\"" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" +  ...  + "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" +  ...  + "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" +  ...  + "\\"" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:15:11:56 | "\\"" +  ...  + "\\"" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:25 | path | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:30 | path.join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | exceptional return of path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:22:11:49 | path.jo ... "temp") | stringConcatenatedWith | '"' -endpoint- '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:27:11:30 | join | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:32:11:40 | __dirname | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:43:11:48 | "temp" | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:11:53:11:56 | "\\"" | stringConcatenatedWith | '"' + path.join() -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:6 | execa | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:16 | execa.shellSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | exceptional return of execa.s ... + safe) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:2:12:34 | execa.s ... + safe) | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:8:12:16 | shellSync | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:26 | 'rm -rf ' | stringConcatenatedWith |  -endpoint- safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | CalleeFlexibleAccessPath | execa.shellSync |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | calleeImports | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:18:12:33 | 'rm -rf ' + safe | receiverName | execa |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | enclosingFunctionBody | cp execFileSync rm -rf path join __dirname temp cp execSync rm -rf  path join __dirname temp execa shell rm -rf  path join __dirname temp execa shellSync rm -rf  path join __dirname temp safe " path join __dirname temp " execa shellSync rm -rf  safe |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | fileImports | child_process execa path |
| autogenerated/ShellCommandInjectionFromEnvironment/ShellCommandInjectionFromEnvironment/tst_shell-command-injection-from-environment.js:12:30:12:33 | safe | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:8 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:7:3:35 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:18 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:12:3:35 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:3:20:3:34 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:5:35 | module. ... mported | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:1:7:1 | module. ... OT OK\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:8:5:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:16:5:35 | thisMethodIsImported | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:5:38 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | assignedToPropName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | functio ... OT OK\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:39:7:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:5:49:5:52 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:2:6:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:5:6:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:10:6:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | contextFunctionInterfaces | thisMethodIsImported(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | enclosingFunctionName | thisMethodIsImported |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/isImported.js:6:22:6:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:16 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:10:1:33 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:1:18:1:32 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:1:5:1 | module. ... dule.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | functio ... dule.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:7:18 | module.exports.foo | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:1:9:1 | module. ... dule.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:8:7:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:16:7:18 | foo | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:7:21 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | functio ... dule.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:22:9:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:7:32:7:35 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:2:8:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:5:8:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:10:8:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | contextFunctionInterfaces | exports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib2.js:8:22:8:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:1:1:1 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:6 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:5:1:33 | cp = re ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:10:1:33 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:1:18:1:32 | "child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:3:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:1:8:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:8:3:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:3:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:18:8:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:3:28:3:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:5:4:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | cp.exec ... [name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:2:6:26 | exceptional return of cp.exec ... [name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:5:6:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:14:6:17 | name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:20:6:25 | [name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:6:21:6:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | cp.exec ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:2:7:24 | exceptional return of cp.exec ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:5:7:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:14:7:17 | name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile name name cp execFile name name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:7:20:7:23 | name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:10:18 | module.exports.foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:1:12:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:8:10:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:16:10:18 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:10:21 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:22:12:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:10:32:10:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:2:11:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:5:11:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:10:11:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:11:22:11:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:18 | module.exports.foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:14:22 | module. ... foo.bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:1:16:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:8:14:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:16:14:18 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:20:14:22 | bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:14:25 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | assignedToPropName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:26:16:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:14:36:14:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:2:15:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:5:15:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:10:15:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:15:22:15:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | enclosingFunctionName | cla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | enclosingFunctionName | cla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | 'arguments' object of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | enclosingFunctionName | cla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | exceptional return of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | function cla() { } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | enclosingFunctionName | cla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:1:18:18 | return of function cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:18:10:18:12 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:3 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:13 | cla.prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:19:20 | cla.prototype.method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:1:21:1 | cla.pro ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:5:19:13 | prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:15:19:20 | method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:19:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | assignedToPropName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:24:21:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:19:34:19:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:2:20:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:5:20:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:10:20:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:20:22:20:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:1:22:26 | module. ... w cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:8:22:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | exceptional return of new cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:18:22:26 | new cla() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:22:22:22:24 | cla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | enclosingFunctionName | cla2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | enclosingFunctionName | cla2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | 'arguments' object of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | enclosingFunctionName | cla2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | exceptional return of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | function cla2() { } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | enclosingFunctionName | cla2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:1:25:19 | return of function cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:25:10:25:13 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:4 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:14 | cla2.prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:26:21 | cla2.pr ... .method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:1:28:1 | cla2.pr ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:6:26:14 | prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:16:26:21 | method | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:26:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | assignedToPropName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:25:28:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:26:35:26:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:2:27:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:5:27:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:10:27:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | enclosingFunctionName | method |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:27:22:27:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:18 | module.exports.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ...  cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ...  cla2() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:1:29:31 | module. ...  cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:8:29:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:16:29:18 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | exceptional return of new cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | assignedToPropName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:22:29:31 | new cla2() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:29:26:29:29 | cla2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:19 | module.exports.lib2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:1:31:42 | module. ... b2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:8:31:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:16:31:19 | lib2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:29 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | exceptional return of require("./lib2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | assignedToPropName | lib2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:23:31:42 | require("./lib2.js") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:31:31:31:41 | "./lib2.js" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:1:45:1 | class C ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:33:7:33:10 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:34:12 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:2:36:2 | constru ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:34:12 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | 'arguments' object of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name)  ... T OK\\n\\t} | assignedToPropName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name)  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name)  ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | (name)  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | exceptional return of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:13:36:2 | return of constructor of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:34:14:34:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:3:35:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:6:35:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:11:35:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:35:23:35:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:2:39:2 | static  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:9:37:11 | foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:37:11 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | 'arguments' object of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name)  ... T OK\\n\\t} | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name)  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name)  ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | (name)  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | exceptional return of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:12:39:2 | return of method foo of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:37:13:37:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:3:38:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:6:38:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:11:38:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:38:23:38:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:40:4 | bar | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:2:44:2 | bar(nam ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:40:4 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | 'arguments' object of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name)  ... / OK\\n\\t} | assignedToPropName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name)  ... / OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name)  ... / OK\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | (name)  ... / OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | exceptional return of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:5:44:2 | return of method bar of class Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:40:6:40:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:3:41:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:6:41:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:11:41:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:41:23:41:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | cp.exec ... Source) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:3:43:33 | exceptional return of cp.exec ... Source) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:6:43:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:11:43:32 | "rm -rf ... ASource | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | enclosingFunctionBody | name cp exec rm -rf  name cp exec rm -rf  notASource |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | enclosingFunctionName | bar |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:43:23:43:32 | notASource | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:19 | module.exports.cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ...  = Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ...  = Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:1:47:26 | module. ...  = Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:8:47:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:16:47:19 | cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | assignedToPropName | cla3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:47:23:47:26 | Cla3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:49:17 | module.exports.mz | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:1:51:1 | module. ... T OK.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:8:49:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:16:49:17 | mz | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:49:20 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | assignedToPropName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | functio ... T OK.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:21:51:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:49:31:49:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:8 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:28 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:33 | require ... ").exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | exceptional return of require ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:2:50:51 | require ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:10:50:27 | "mz/child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:30:50:33 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:43 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | CalleeFlexibleAccessPath | import(!).exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | calleeImports | mz/child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:35:50:50 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | enclosingFunctionBody | name require mz/child_process exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | enclosingFunctionName | mz |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:50:47:50:50 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:53:19 | module.exports.flow | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:1:62:1 | module. ... md2);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:8:53:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:16:53:19 | flow | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:53:22 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | assignedToPropName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | functio ... md2);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:23:62:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:53:33:53:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:9 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 =  ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 =  ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 =  ...  + name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 =  ...  + name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:6:54:28 | cmd1 =  ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:21 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:13:54:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:54:25:54:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | cp.exec(cmd1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:2:55:14 | exceptional return of cp.exec(cmd1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:5:55:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:55:10:55:13 | cmd1 | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:9 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 =  ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 =  ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 =  ...  + name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 =  ...  + name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:6:57:28 | cmd2 =  ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:21 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:13:57:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:57:25:57:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:58:1 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | 'arguments' object of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | exceptional return of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | functio ... md);\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:2:60:2 | return of function myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:11:58:16 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:58:18:58:20 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:3:59:14 | exceptional return of cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:6:59:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | contextSurroundingFunctionParameters | (cmd) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:59:11:59:13 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:7 | myExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | exceptional return of myExec(cmd2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:2:61:13 | myExec(cmd2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | CalleeFlexibleAccessPath | myExec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | enclosingFunctionBody | name cmd1 rm -rf  name cp exec cmd1 cmd2 rm -rf  name myExec cmd cp exec cmd myExec cmd2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | enclosingFunctionName | flow |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:61:9:61:12 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:64:27 | module. ... gConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... .    \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... .    \\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:1:80:1 | module. ... .    \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:8:64:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:16:64:27 | stringConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:64:30 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... .    \\n} | assignedToPropName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... .    \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... .    \\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | functio ... .    \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:31:80:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:64:41:64:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:2:65:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:5:65:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:10:65:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:65:22:65:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | cp.exec(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:2:67:14 | exceptional return of cp.exec(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:5:67:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:67:10:67:13 | name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | cp.exec ... a end") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:2:69:48 | exceptional return of cp.exec ... a end") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:5:69:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:23 | "for foo in (" | stringConcatenatedWith |  -endpoint- name + ') do bla end' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ...  + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ...  + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:30 | "for fo ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:10:69:47 | "for fo ... la end" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:27:69:30 | name | stringConcatenatedWith | 'for foo in (' -endpoint- ') do bla end' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:69:34:69:47 | ") do bla end" | stringConcatenatedWith | 'for foo in (' + name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:2:71:32 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:5:71:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:24 | "cat /foO/BAR/" | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:10:71:31 | "cat /f ...  + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:71:28:71:31 | name | stringConcatenatedWith | 'cat /foO/BAR/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | cp.exec ... + "\\"") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:2:73:32 | exceptional return of cp.exec ... + "\\"") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:5:73:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:17 | "cat \\"" | stringConcatenatedWith |  -endpoint- name + '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:24 | "cat \\"" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:10:73:31 | "cat \\" ...  + "\\"" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:21:73:24 | name | stringConcatenatedWith | 'cat "' -endpoint- '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:73:28:73:31 | "\\"" | stringConcatenatedWith | 'cat "' + name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ...  + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ...  + "'") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ...  + "'") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ...  + "'") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | cp.exec ...  + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ...  + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ...  + "'") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ...  + "'") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ...  + "'") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:2:75:30 | exceptional return of cp.exec ...  + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:5:75:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:16 | "cat '" | stringConcatenatedWith |  -endpoint- name + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:23 | "cat '" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:10:75:29 | "cat '" + name + "'" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:20:75:23 | name | stringConcatenatedWith | 'cat '' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:75:27:75:29 | "'" | stringConcatenatedWith | 'cat '' + name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ...  + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ...  + "'") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ...  + "'") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ...  + "'") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | cp.exec ...  + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ...  + "'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ...  + "'") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ...  + "'") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ...  + "'") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:2:77:38 | exceptional return of cp.exec ...  + "'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:5:77:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:24 | "cat '/foo/bar" | stringConcatenatedWith |  -endpoint- name + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ...  + name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ...  + name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:31 | "cat '/ ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:10:77:37 | "cat '/ ... e + "'" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:28:77:31 | name | stringConcatenatedWith | 'cat '/foo/bar' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:77:35:77:37 | "'" | stringConcatenatedWith | 'cat '/foo/bar' + name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ...  file") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ...  file") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ...  file") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ...  file") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | cp.exec ...  file") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ...  file") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ...  file") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ...  file") | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ...  file") | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:2:79:29 | exceptional return of cp.exec ...  file") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:5:79:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:13 | name | stringConcatenatedWith |  -endpoint- ' some file' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:10:79:28 | name + " some file" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | enclosingFunctionBody | name cp exec rm -rf  name cp exec name cp exec for foo in ( name ) do bla end cp exec cat /foO/BAR/ name cp exec cat " name " cp exec cat ' name ' cp exec cat '/foo/bar name ' cp exec name  some file |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | enclosingFunctionName | stringConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:79:17:79:28 | " some file" | stringConcatenatedWith | name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:82:21 | module. ... .arrays | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:1:94:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:8:82:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:16:82:21 | arrays | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:82:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | assignedToPropName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:25:94:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:82:35:82:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:2:83:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:5:83:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:10:83:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:83:22:83:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:10 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:6:85:21 | args1 = ["node"] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:14:85:21 | ["node"] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:85:15:85:20 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:6 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:11 | args1.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | args1.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:2:86:17 | exceptional return of args1.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:8:86:11 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | CalleeFlexibleAccessPath | args1.push |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:86:13:86:16 | name | receiverName | args1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:2:87:25 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:5:87:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:14 | args1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:19 | args1.join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | args1.join(" ") | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:10:87:24 | exceptional return of args1.join(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:16:87:19 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | CalleeFlexibleAccessPath | args1.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:87:21:87:23 | " " | receiverName | args1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:2:89:36 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:5:89:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:25 | ["rm -rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:30 | ["rm -r ... e].join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | ["rm -r ... in(" ") | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:10:89:35 | exceptional return of ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:11:89:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:21:89:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:27:89:30 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | CalleeFlexibleAccessPath | ?.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:89:32:89:34 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:2:91:50 | exceptional return of cp.exec ... n(" ")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:5:91:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:39 | ["rm -r ... + "\\""] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:44 | ["rm -r ... "].join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | ["rm -r ... in(" ") | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:10:91:49 | exceptional return of ["rm -r ... in(" ") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:11:91:18 | "rm -rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:24 | "\\"" | stringConcatenatedWith |  -endpoint- name + '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:31 | "\\"" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:21:91:38 | "\\"" + name + "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:28:91:31 | name | stringConcatenatedWith | '"' -endpoint- '"' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:35:91:38 | "\\"" | stringConcatenatedWith | '"' + name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:41:91:44 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | CalleeFlexibleAccessPath | ?.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:91:46:91:48 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ...  name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ...  name]) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ...  name]) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ...  name]) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | cp.exec ...  name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ...  name]) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ...  name]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ...  name]) | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ...  name]) | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:2:93:33 | exceptional return of cp.exec ...  name]) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:5:93:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:14:93:17 | "rm" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:20:93:32 | ["-rf", name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:21:93:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionBody | name cp exec rm -rf  name args1 node args1 push name cp exec args1 join   cp exec rm -rf name join   cp exec rm -rf " name " join   cp execFile rm -rf name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | enclosingFunctionName | arrays |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:93:28:93:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:8 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util =  ... "util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util =  ... "util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:5:96:26 | util =  ... "util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | exceptional return of require("util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:12:96:26 | require("util") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:96:20:96:25 | "util" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:97:21 | module. ... .format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:1:109:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:8:97:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:16:97:21 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:97:24 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | assignedToPropName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:25:109:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:97:35:97:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:2:98:40 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:5:98:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:10:98:39 | util.fo ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:15:98:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:22:98:32 | "rm -rf %s" | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:98:35:98:38 | name | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:2:100:42 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:5:100:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:10:100:41 | util.fo ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:15:100:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:22:100:34 | "rm -rf '%s'" | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:100:37:100:40 | name | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:2:102:51 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:5:102:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:10:102:50 | util.fo ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:15:102:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:22:102:43 | "rm -rf ... ar/%s'" | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:102:46:102:49 | name | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:2:104:41 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:5:104:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:10:104:40 | util.fo ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:15:104:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:22:104:33 | "%s foo/bar" | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:104:36:104:39 | name | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:2:106:57 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:5:106:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:13 | util | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:20 | util.format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | exceptional return of util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:10:106:56 | util.fo ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:15:106:20 | format | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:22:106:49 | "for fo ... ar end" | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | CalleeFlexibleAccessPath | util.format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:106:52:106:55 | name | receiverName | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ...  name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ...  name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ...  name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ...  name)) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ...  name)) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:2:108:46 | exceptional return of cp.exec ...  name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:5:108:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | exceptional return of require("printf") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:26 | require("printf") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | exceptional return of require ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:10:108:45 | require ... , name) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:18:108:25 | "printf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | calleeImports | printf |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:28:108:38 | 'rm -rf %s' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | CalleeFlexibleAccessPath | import(!) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | calleeImports | printf |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | enclosingFunctionBody | name cp exec util format rm -rf %s name cp exec util format rm -rf '%s' name cp exec util format rm -rf '/foo/bar/%s' name cp exec util format %s foo/bar name cp exec util format for foo in (%s) do bar end name cp exec require printf rm -rf %s name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | enclosingFunctionName | format |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:108:41:108:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:111:20 | module.exports.valid | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:1:118:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:8:111:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:16:111:20 | valid | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:111:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | assignedToPropName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:24:118:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:111:34:111:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:2:112:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:5:112:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:10:112:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:112:22:112:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:6:114:23 | !isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:17 | isValidName | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | exceptional return of isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:114:7:114:23 | isValidName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:2:117:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:5:117:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:10:117:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | enclosingFunctionBody | name cp exec rm -rf  name isValidName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | enclosingFunctionName | valid |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:117:22:117:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:120:19 | module.exports.safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:1:127:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:8:120:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:16:120:19 | safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:120:22 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | assignedToPropName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:23:127:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:120:33:120:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:2:121:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:5:121:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:10:121:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:121:22:121:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:6:123:22 | !isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:16 | isSafeName | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | exceptional return of isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:123:7:123:22 | isSafeName(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:2:126:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:5:126:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:10:126:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | enclosingFunctionBody | name cp exec rm -rf  name isSafeName name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | enclosingFunctionName | safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:126:22:126:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:1:140:1 | class C ... ed\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:129:7:129:10 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:130:4 | wha | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:2:132:2 | wha(nam ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:130:4 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | 'arguments' object of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name)  ... T OK\\n\\t} | assignedToPropName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name)  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name)  ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | (name)  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | exceptional return of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:5:132:2 | return of method wha of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:130:6:130:9 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:3:131:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:6:131:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:11:131:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | enclosingFunctionName | wha |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:131:23:131:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:2:136:2 | static  ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:9:134:11 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:134:11 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | 'arguments' object of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name)  ... rted\\n\\t} | assignedToPropName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name)  ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name)  ... rted\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | (name)  ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | exceptional return of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:12:136:2 | return of method bla of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:134:13:134:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:3:135:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:6:135:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:11:135:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | enclosingFunctionName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:135:23:135:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:137:12 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:2:139:2 | constru ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:137:12 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | 'arguments' object of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name)  ... rted\\n\\t} | assignedToPropName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name)  ... rted\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name)  ... rted\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | (name)  ... rted\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | exceptional return of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:13:139:2 | return of constructor of class Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:137:14:137:17 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:3:138:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:6:138:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:11:138:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:138:23:138:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:19 | module.exports.cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ...  Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ...  Cla4() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:1:141:32 | module. ...  Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:8:141:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:16:141:19 | cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | exceptional return of new Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | assignedToPropName | cla4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:23:141:32 | new Cla4() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:141:27:141:30 | Cla4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:143:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | 'arguments' object of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | exceptional return of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | functio ... orted\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:1:145:1 | return of function Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:10:143:13 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:143:15:143:18 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:2:144:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:5:144:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:10:144:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | enclosingFunctionName | Cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:144:22:144:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:19 | module.exports.cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ...  Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ...  Cla5() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:1:146:32 | module. ...  Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:8:146:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:16:146:19 | cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | exceptional return of new Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | assignedToPropName | cla5 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:23:146:32 | new Cla5() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:146:27:146:30 | Cla5 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:148:23 | module. ... ndirect | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ...  cb);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ...  cb);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:1:153:1 | module. ...  cb);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:8:148:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:16:148:23 | indirect | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:148:26 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ...  cb);\\n} | assignedToPropName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ...  cb);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ...  cb);\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | functio ...  cb);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:27:153:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:148:37:148:40 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ...  + name | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ...  + name | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:6:149:27 | cmd = " ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:20 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:12:149:27 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:149:24:149:27 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:7 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:6:150:14 | sh = "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:150:11:150:14 | "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:6:151:23 | args = ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:13:151:23 | ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:14:151:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:151:20:151:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:2:152:23 | exceptional return of cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:5:152:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:11:152:12 | sh | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:15:152:18 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | enclosingFunctionBody | name cmd rm -rf  name sh sh args -c cmd cp spawn sh args cb |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | enclosingFunctionName | indirect |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:152:21:152:22 | cb | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:155:24 | module. ... direct2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:1:168:1 | module. ... }\\n\\t);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:8:155:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:16:155:24 | indirect2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:155:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | assignedToPropName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | functio ... }\\n\\t);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:28:168:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:155:38:155:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:6:156:15 | cmd = name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:156:12:156:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:7 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:6:157:14 | sh = "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:157:11:157:14 | "sh" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:6:158:23 | args = ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:13:158:23 | ["-c", cmd] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:14:158:17 | "-c" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:158:20:158:22 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:2:159:23 | exceptional return of cp.spaw ... gs, cb) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:5:159:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:11:159:12 | sh | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:15:159:18 | args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:159:21:159:22 | cb | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:9 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 =  ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 =  ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 =  ...  + name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 =  ...  + name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:6:161:28 | cmd2 =  ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:21 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:13:161:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:161:25:161:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:10 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:6:162:19 | args2 = [cmd2] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:14:162:19 | [cmd2] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:162:15:162:18 | cmd2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:163:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | cp.spaw ... t' }\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:2:167:2 | exceptional return of cp.spaw ... t' }\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:163:5:163:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:164:3:164:11 | 'cmd.exe' | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:16 | ['/C', editor] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C',  ... .concat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C',  ... .concat | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C',  ... .concat | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C',  ... .concat | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:23 | ['/C',  ... .concat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | ['/C',  ... (args2) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C',  ... (args2) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C',  ... (args2) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C',  ... (args2) | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C',  ... (args2) | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:3:165:30 | exceptional return of ['/C',  ... (args2) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:4:165:7 | '/C' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:10:165:15 | editor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:18:165:23 | concat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:165:25:165:29 | args2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:3:166:22 | { stdio: 'inherit' } | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:9 | stdio | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:5:166:20 | stdio: 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | InputAccessPathFromCallee | 2.stdio |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | assignedToPropName | stdio |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | enclosingFunctionBody | name cmd name sh sh args -c cmd cp spawn sh args cb cmd2 rm -rf  name args2 cmd2 cp spawn cmd.exe /C editor concat args2 stdio inherit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | enclosingFunctionName | indirect2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:166:12:166:20 | 'inherit' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:170:18 | module.exports.cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:1:175:1 | module. ... T OK\\n\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:8:170:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:16:170:18 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:170:21 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | assignedToPropName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | functio ... T OK\\n\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:22:175:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:32:170:38 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:170:41:170:44 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | cp.exec ... ommand) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:2:171:27 | exceptional return of cp.exec ... ommand) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:5:171:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:16 | "fo \| " | stringConcatenatedWith |  -endpoint- command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:10:171:26 | "fo \| " + command | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:171:20:171:26 | command | stringConcatenatedWith | 'fo \| ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:2:173:24 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:5:173:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:16 | "fo \| " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:10:173:23 | "fo \| " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | contextSurroundingFunctionParameters | (command, name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | enclosingFunctionBody | command name cp exec fo \|  command cp exec fo \|  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | enclosingFunctionName | cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:173:20:173:23 | name | stringConcatenatedWith | 'fo \| ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:177:24 | module. ... nitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:1:183:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:8:177:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:16:177:24 | sanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:177:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | assignedToPropName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:28:183:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:177:38:177:41 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:14 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitiz ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:6:178:56 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:20 | "'" | stringConcatenatedWith |  -endpoint- name.replace() + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:50 | "'" + n ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:18:178:56 | "'" + n ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:35 | name.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | exceptional return of name.re ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:24:178:50 | name.re ... '\\\\''") | stringConcatenatedWith | ''' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:29:178:35 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | CalleeFlexibleAccessPath | name.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:37:178:40 | /'/g | receiverName | name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | CalleeFlexibleAccessPath | name.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:43:178:49 | "'\\\\''" | receiverName | name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:178:54:178:56 | "'" | stringConcatenatedWith | ''' + name.replace() -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:2:179:31 | exceptional return of cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:5:179:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:10:179:30 | "rm -rf ... nitized | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:179:22:179:30 | sanitized | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:11 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken  ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken  ... ) + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken  ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken  ... ) + "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:6:181:52 | broken  ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:17 | "'" | stringConcatenatedWith |  -endpoint- name.replace() + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:46 | "'" + n ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:15:181:52 | "'" + n ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:32 | name.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | exceptional return of name.re ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:21:181:46 | name.re ... "'\\''") | stringConcatenatedWith | ''' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:26:181:32 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | CalleeFlexibleAccessPath | name.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:34:181:37 | /'/g | receiverName | name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | CalleeFlexibleAccessPath | name.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:40:181:45 | "'\\''" | receiverName | name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:181:50:181:52 | "'" | stringConcatenatedWith | ''' + name.replace() -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | cp.exec ... broken) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:2:182:28 | exceptional return of cp.exec ... broken) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:5:182:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:10:182:27 | "rm -rf " + broken | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | enclosingFunctionBody | name sanitized ' name replace /'/g '\\'' ' cp exec rm -rf  sanitized broken ' name replace /'/g ''' ' cp exec rm -rf  broken |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | enclosingFunctionName | sanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:182:22:182:27 | broken | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:8 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path =  ... "path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path =  ... "path") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:5:185:26 | path =  ... "path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | exceptional return of require("path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:12:185:26 | require("path") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:185:20:185:25 | "path" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:186:20 | module.exports.guard | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:1:194:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:8:186:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:16:186:20 | guard | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:186:23 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | assignedToPropName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:24:194:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:186:34:186:37 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:2:187:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:5:187:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:10:187:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:187:22:187:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:6:189:22 | !path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:10 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:16 | path.exist | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | exceptional return of path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:7:189:22 | path.exist(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:12:189:16 | exist | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | CalleeFlexibleAccessPath | path.exist |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:189:18:189:21 | name | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:3:190:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:6:190:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:11:190:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:190:23:190:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:2:193:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:5:193:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:10:193:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | enclosingFunctionBody | name cp exec rm -rf  name path exist name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | enclosingFunctionName | guard |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:193:22:193:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:196:31 | module. ... OfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:1:204:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:8:196:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:16:196:31 | blacklistOfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:196:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:35:204:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:196:45:196:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:2:197:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:5:197:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:10:197:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:197:22:197:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:25 | /[^A-Za-z0-9_\\/:=-]/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:30 | /[^A-Za ... ]/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | /[^A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:6:199:36 | exceptional return of /[^A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:27:199:30 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | CalleeFlexibleAccessPath | ?.test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:199:32:199:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:3:200:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:6:200:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:11:200:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:200:23:200:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:3:202:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:6:202:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:11:202:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | enclosingFunctionBody | name cp exec rm -rf  name /[^A-Za-z0-9_\\/:=-]/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | enclosingFunctionName | blacklistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:202:23:202:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:206:31 | module. ... OfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:1:214:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:8:206:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:16:206:31 | whitelistOfChars | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:206:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:35:214:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:206:45:206:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:2:207:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:5:207:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:10:207:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:207:22:207:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:26 | /^[A-Za ... /:=-]$/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:31 | /^[A-Za ... $/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | /^[A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:6:209:37 | exceptional return of /^[A-Za ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:28:209:31 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | CalleeFlexibleAccessPath | ?.test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:209:33:209:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:3:210:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:6:210:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:11:210:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:210:23:210:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:3:212:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:6:212:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:11:212:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | enclosingFunctionBody | name cp exec rm -rf  name /^[A-Za-z0-9_\\/:=-]$/ test name cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | enclosingFunctionName | whitelistOfChars |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:212:23:212:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:216:25 | module. ... ckList2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:1:225:1 | module. ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:8:216:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:16:216:25 | blackList2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:216:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | assignedToPropName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | functio ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:29:225:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:216:39:216:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:2:217:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:5:217:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:10:217:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:217:22:217:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:6:219:37 | !/^([a- ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:26 | /^([a-zA-Z0-9]+))?$/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:31 | /^([a-z ... $/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | /^([a-z ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:7:219:37 | exceptional return of /^([a-z ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:28:219:31 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | CalleeFlexibleAccessPath | ?.test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:219:33:219:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:3:220:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:6:220:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:11:220:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:220:23:220:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:9 | process | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:14 | process.exit | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | exceptional return of process.exit(-1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:3:221:18 | process.exit(-1) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:11:221:14 | exit | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | CalleeFlexibleAccessPath | process.exit |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | calleeImports | process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:16:221:17 | -1 | receiverName | process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:221:17:221:17 | 1 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:2:224:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:5:224:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:10:224:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | enclosingFunctionBody | name cp exec rm -rf  name /^([a-zA-Z0-9]+))?$/ test name cp exec rm -rf  name process exit 1 cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | enclosingFunctionName | blackList2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:224:22:224:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:227:25 | module. ... essSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:1:237:1 | module. ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:8:227:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:16:227:25 | accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:227:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | assignedToPropName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | functio ... ENCY]\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:29:237:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:227:39:227:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:2:228:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:5:228:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:10:228:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:228:22:228:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:6 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:17 | path.accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | exceptional return of path.ac ... c(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:3:231:23 | path.ac ... c(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:8:231:17 | accessSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | CalleeFlexibleAccessPath | path.accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:231:19:231:22 | name | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:232:11:232:11 | e | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:2:236:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:5:236:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:10:236:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | enclosingFunctionBody | name cp exec rm -rf  name path accessSync name e cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | enclosingFunctionName | accessSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:236:22:236:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:239:14 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanIn ... rn s;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:5:246:1 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:239:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | 'arguments' object of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | exceptional return of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | functio ... rn s;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:18:246:1 | return of function cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:239:28:239:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:25 | /[^A-Za-z0-9_\\/:=-]/ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:30 | /[^A-Za ... ]/.test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | /[^A-Za ... test(s) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:6:240:33 | exceptional return of /[^A-Za ... test(s) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:27:240:30 | test | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | CalleeFlexibleAccessPath | ?.test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:240:32:240:32 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:3 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:3:241:42 | s = "'" ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:9 | "'" | stringConcatenatedWith |  -endpoint- s.replace() + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:36 | "'" + s ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:7:241:42 | "'" + s ... ) + "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:13 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:21 | s.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | exceptional return of s.repla ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:13:241:36 | s.repla ... '\\\\''") | stringConcatenatedWith | ''' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:15:241:21 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:23:241:26 | /'/g | receiverName | s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:29:241:35 | "'\\\\''" | receiverName | s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:241:40:241:42 | "'" | stringConcatenatedWith | ''' + s.replace() -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:242:3 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ...  "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ...  "\\\\'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ...  "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ...  "\\\\'") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:3:243:28 | s = s.r ...  "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:7 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:15 | s.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | exceptional return of s.repla ... /g, '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:242:32 | s.repla ... /g, '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:11 | s.repla ... replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ...  "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ...  "\\\\'") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | exceptional return of s.repla ...  "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ...  "\\\\'") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ...  "\\\\'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ...  "\\\\'") | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ...  "\\\\'") | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:7:243:28 | s.repla ...  "\\\\'") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:9:242:15 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:17:242:27 | /^(?:'')+/g | receiverName | s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:242:30:242:31 | '' | receiverName | s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:5:243:11 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:13:243:20 | /\\\\'''/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:243:23:243:27 | "\\\\'" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionBody | s /[^A-Za-z0-9_\\/:=-]/ test s s ' s replace /'/g '\\'' ' s s replace /^(?:'')+/g  replace /\\\\'''/g \\' s |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | enclosingFunctionName | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:245:9:245:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:248:28 | module. ... nitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:1:254:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:8:248:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:16:248:28 | goodSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:248:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | assignedToPropName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:32:254:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:248:42:248:45 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:2:249:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:5:249:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:10:249:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:249:22:249:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:12 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:6:251:31 | cleaned ... t(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:25 | cleanInput | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | cleanInput(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:16:251:31 | exceptional return of cleanInput(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | CalleeFlexibleAccessPath | cleanInput |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:251:27:251:30 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | cp.exec ... leaned) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:2:253:29 | exceptional return of cp.exec ... leaned) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:5:253:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:10:253:28 | "rm -rf " + cleaned | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | enclosingFunctionBody | name cp exec rm -rf  name cleaned cleanInput name cp exec rm -rf  cleaned |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | enclosingFunctionName | goodSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:253:22:253:28 | cleaned | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:6 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:5:256:22 | fs = require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:16 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | exceptional return of require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:10:256:22 | require("fs") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:256:18:256:21 | "fs" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:257:21 | module. ... .guard2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:1:265:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:8:257:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:16:257:21 | guard2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:257:24 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | assignedToPropName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:25:265:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:257:35:257:38 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:2:258:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:5:258:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:10:258:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:258:22:258:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:6:260:37 | !fs.exi ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:8 | fs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:19 | fs.existsSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | exceptional return of fs.exis ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:7:260:37 | fs.exis ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:10:260:19 | existsSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:29 | "prefix/" | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | CalleeFlexibleAccessPath | fs.existsSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | calleeImports | fs |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:21:260:36 | "prefix/" + name | receiverName | fs |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:260:33:260:36 | name | stringConcatenatedWith | 'prefix/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:3:261:34 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:6:261:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:26 | "rm -rf prefix/" | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:11:261:33 | "rm -rf ...  + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:261:30:261:33 | name | stringConcatenatedWith | 'rm -rf prefix/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:2:264:33 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:5:264:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:25 | "rm -rf prefix/" | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:10:264:32 | "rm -rf ...  + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | enclosingFunctionBody | name cp exec rm -rf  name fs existsSync prefix/ name cp exec rm -rf prefix/ name cp exec rm -rf prefix/ name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | enclosingFunctionName | guard2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:264:29:264:32 | name | stringConcatenatedWith | 'rm -rf prefix/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:267:32 | module. ... roperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:1:273:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:8:267:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:16:267:32 | sanitizerProperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:267:35 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | assignedToPropName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:36:273:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:267:46:267:48 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:2:268:33 | exceptional return of cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:5:268:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- obj.version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:10:268:32 | "rm -rf ... version | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:24 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:22:268:32 | obj.version | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:268:26:268:32 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:4 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:12 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:2:270:17 | obj.version = "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:6:270:12 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | assignedToPropName | version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:270:16:270:17 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:2:272:33 | exceptional return of cp.exec ... ersion) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:5:272:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- obj.version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:10:272:32 | "rm -rf ... version | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:24 | obj | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:22:272:32 | obj.version | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | contextSurroundingFunctionParameters | (obj) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | enclosingFunctionBody | obj cp exec rm -rf  obj version obj version  cp exec rm -rf  obj version |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | enclosingFunctionName | sanitizerProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:272:26:272:32 | version | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:275:18 | module.exports.Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:1:283:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:8:275:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:16:275:18 | Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | assignedToPropName | Foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:22:283:1 | class F ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:28:275:30 | Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | 'arguments' object of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | assignedToPropName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | () {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | constructor() {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | exceptional return of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | return of default constructor of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | enclosingFunctionName | constructor |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:275:32:275:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:276:6 | start | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:2:282:2 | start(o ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:276:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | 'arguments' object of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts)  ... T OK\\n\\t} | assignedToPropName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts)  ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts)  ... T OK\\n\\t} | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | (opts)  ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | exceptional return of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:7:282:2 | return of method start of class Foo | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:276:8:276:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:3:277:31 | exceptional return of cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:6:277:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- opts.bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:11:277:30 | "rm -rf " + opts.bla | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:26 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:23:277:30 | opts.bla | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:277:28:277:30 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:11 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:3:278:16 | this.opts = {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:8:278:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | assignedToPropName | opts |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:278:15:278:16 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:11 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:15 | this.opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:3:279:26 | this.op ... pts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:8:279:11 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:13:279:15 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:22 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | assignedToPropName | bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:19:279:26 | opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:279:24:279:26 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:3:281:36 | exceptional return of cp.exec ... ts.bla) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:6:281:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- this.opts.bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:11:281:35 | "rm -rf ... pts.bla | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:26 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:31 | this.opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:23:281:35 | this.opts.bla | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:28:281:31 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | enclosingFunctionBody | opts cp exec rm -rf  opts bla opts opts bla opts bla cp exec rm -rf  opts bla |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | enclosingFunctionName | start |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:281:33:281:35 | bla | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:285:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | 'arguments' object of function sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | 'arguments' object of function sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | 'arguments' object of function sanitizeShellString | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | 'arguments' object of function sanitizeShellString | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | 'arguments' object of function sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | exceptional return of function sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | exceptional return of function sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | exceptional return of function sanitizeShellString | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | exceptional return of function sanitizeShellString | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | exceptional return of function sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | functio ... esult\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | functio ... esult\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | functio ... esult\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | return of function sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | return of function sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | return of function sanitizeShellString | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | return of function sanitizeShellString | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:1:305:1 | return of function sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:10:285:28 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:285:30:285:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:12 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:12 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:12 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:12 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:12 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result = str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result = str | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result = str | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result = str | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:7:286:18 | result = str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:16:286:18 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:16:286:18 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:16:286:18 | str | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:16:286:18 | str | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:286:16:286:18 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:3:287:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:12:287:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:19:287:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:19:287:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:19:287:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:19:287:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:19:287:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:27:287:30 | />/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:287:33:287:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:3:288:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:12:288:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:19:288:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:19:288:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:19:288:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:19:288:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:19:288:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:27:288:30 | /</g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:288:33:288:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:3:289:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:12:289:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:19:289:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:19:289:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:19:289:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:19:289:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:19:289:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:27:289:31 | /\\*/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:289:34:289:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:3:290:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:12:290:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:19:290:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:19:290:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:19:290:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:19:290:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:19:290:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:27:290:31 | /\\?/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:290:34:290:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:3:291:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:12:291:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:19:291:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:19:291:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:19:291:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:19:291:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:19:291:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:27:291:31 | /\\[/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:291:34:291:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:3:292:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:12:292:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:19:292:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:19:292:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:19:292:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:19:292:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:19:292:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:27:292:31 | /\\]/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:292:34:292:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:3:293:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:12:293:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:19:293:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:19:293:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:19:293:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:19:293:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:19:293:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:27:293:31 | /\\\|/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:293:34:293:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:3:294:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:12:294:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:19:294:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:19:294:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:19:294:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:19:294:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:19:294:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:27:294:31 | /\\`/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:294:34:294:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:3:295:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:12:295:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:19:295:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:19:295:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:19:295:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:19:295:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:19:295:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:27:295:30 | /$/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:295:33:295:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:3:296:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:12:296:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:19:296:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:19:296:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:19:296:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:19:296:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:19:296:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:27:296:30 | /;/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:296:33:296:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:3:297:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:12:297:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:19:297:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:19:297:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:19:297:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:19:297:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:19:297:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:27:297:30 | /&/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:297:33:297:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:3:298:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:12:298:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:19:298:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:19:298:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:19:298:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:19:298:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:19:298:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:27:298:31 | /\\)/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:298:34:298:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:3:299:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:12:299:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:19:299:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:19:299:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:19:299:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:19:299:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:19:299:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:27:299:31 | /\\(/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:299:34:299:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:3:300:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:12:300:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:19:300:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:19:300:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:19:300:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:19:300:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:19:300:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:27:300:31 | /\\$/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:300:34:300:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:3:301:35 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:12:301:35 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:19:301:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:19:301:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:19:301:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:19:301:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:19:301:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:27:301:30 | /#/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:301:33:301:34 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:3:302:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:12:302:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:19:302:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:19:302:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:19:302:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:19:302:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:19:302:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:27:302:31 | /\\\\/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:302:34:302:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:8 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:8 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:8 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:8 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:8 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result  ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result  ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result  ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result  ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:3:303:36 | result  ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:17 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:17 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:17 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:17 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:17 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:25 | result.replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:25 | result.replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:25 | result.replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:25 | result.replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:25 | result.replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | exceptional return of result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | exceptional return of result. ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | exceptional return of result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | exceptional return of result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | exceptional return of result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | result. ... /g, "") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | result. ... /g, "") | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | result. ... /g, "") | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | result. ... /g, "") | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:12:303:36 | result. ... /g, "") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:19:303:25 | replace | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:19:303:25 | replace | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:19:303:25 | replace | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:19:303:25 | replace | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:19:303:25 | replace | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:27:303:31 | /\\n/g | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | CalleeFlexibleAccessPath | result.replace |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:303:34:303:35 | "" | receiverName | result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:304:10:304:15 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:304:10:304:15 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:304:10:304:15 | result | enclosingFunctionBody | str result str result result replace />/g  result result replace /</g  result result replace /\\*/g  result result replace /\\?/g  result result replace /\\[/g  result result replace /\\]/g  result result replace /\\\|/g  result result replace /\\`/g  result result replace /$/g  result result replace /;/g  result result replace /&/g  result result replace /\\)/g  result result replace /\\(/g  result result replace /\\$/g  result result replace /#/g  result result replace /\\\\/g  result result replace /\\n/g  result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:304:10:304:15 | result | enclosingFunctionName | sanitizeShellString |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:304:10:304:15 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:25 | module. ... itizer2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:25 | module. ... itizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:307:25 | module. ... itizer2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:312:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:312:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:1:312:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:8:307:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:8:307:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:8:307:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:16:307:25 | sanitizer2 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:16:307:25 | sanitizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:16:307:25 | sanitizer2 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | cp | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | sanitizeShellString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | sanitizeShellString | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | sanitizeShellString | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | this | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | this | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:307:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | functio ... // OK\\n} | assignedToPropName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | return of anonymous function | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:29:312:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:307:39:307:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:4 | cp | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:9 | cp.exec | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:3:308:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:6:308:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:6:308:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:6:308:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:6:308:9 | exec | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:6:308:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:11:308:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:308:23:308:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:15 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:15 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:15 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:15 | sanitized | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:15 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitiz ... g(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitiz ... g(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitiz ... g(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitiz ... g(name) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitiz ... g(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitized | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitized | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:7:310:43 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:37 | sanitizeShellString | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:37 | sanitizeShellString | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:37 | sanitizeShellString | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:37 | sanitizeShellString | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:37 | sanitizeShellString | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | exceptional return of sanitiz ... g(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | exceptional return of sanitiz ... g(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | exceptional return of sanitiz ... g(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | exceptional return of sanitiz ... g(name) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | exceptional return of sanitiz ... g(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | sanitiz ... g(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | sanitiz ... g(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | sanitiz ... g(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | sanitiz ... g(name) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:310:19:310:43 | sanitiz ... g(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:4 | cp | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:9 | cp.exec | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | cp.exec ... itized) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | cp.exec ... itized) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | exceptional return of cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | exceptional return of cp.exec ... itized) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | exceptional return of cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | exceptional return of cp.exec ... itized) | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:3:311:32 | exceptional return of cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:6:311:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:6:311:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:6:311:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:6:311:9 | exec | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:6:311:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:11:311:31 | "rm -rf ... nitized | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized sanitizeShellString name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | enclosingFunctionName | sanitizer2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:311:23:311:31 | sanitized | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:26 | module. ... ofcheck | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:26 | module. ... ofcheck | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:314:26 | module. ... ofcheck | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:322:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:322:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:1:322:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:8:314:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:8:314:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:8:314:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:16:314:26 | typeofcheck | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:16:314:26 | typeofcheck | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:16:314:26 | typeofcheck | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | cp | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | this | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | this | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:314:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | 'arguments' object of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | exceptional return of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | return of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:30:322:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:314:40:314:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:3 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:8 | cp.exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:2:315:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:5:315:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:5:315:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:5:315:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:5:315:8 | exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:5:315:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:10:315:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:315:22:315:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:16 | typeof name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:16 | typeof name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:16 | typeof name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:16 | typeof name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:16 | typeof name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | typeof  ... efined" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | typeof  ... efined" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | typeof  ... efined" | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | typeof  ... efined" | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:6:317:32 | typeof  ... efined" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:13:317:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:13:317:16 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:13:317:16 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:13:317:16 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:13:317:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:22:317:32 | "undefined" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:22:317:32 | "undefined" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:22:317:32 | "undefined" | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:22:317:32 | "undefined" | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:317:22:317:32 | "undefined" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:4 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:9 | cp.exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:3:318:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:6:318:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:6:318:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:6:318:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:6:318:9 | exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:6:318:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:11:318:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:318:23:318:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:4 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:9 | cp.exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:3:320:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:6:320:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:6:320:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:6:320:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:6:320:9 | exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:6:320:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:11:320:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | enclosingFunctionBody | name cp exec rm -rf  name name undefined cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:320:23:320:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:26 | module. ... ofcheck | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:26 | module. ... ofcheck | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:324:26 | module. ... ofcheck | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:327:1 | module. ... md); \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:327:1 | module. ... md); \\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:1:327:1 | module. ... md); \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:8:324:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:8:324:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:8:324:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:16:324:26 | typeofcheck | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:16:324:26 | typeofcheck | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:16:324:26 | typeofcheck | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | cp | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | this | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | this | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:324:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | 'arguments' object of anonymous function | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | 'arguments' object of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | exceptional return of anonymous function | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | exceptional return of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | functio ... md); \\n} | assignedToPropName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | functio ... md); \\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | functio ... md); \\n} | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | functio ... md); \\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | return of anonymous function | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | return of anonymous function | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:30:327:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:324:40:324:42 | arg | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:8 | cmd | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:8 | cmd | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:8 | cmd | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd = " ... " + arg | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd = " ... " + arg | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd = " ... " + arg | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd = " ... " + arg | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:6:325:51 | cmd = " ... " + arg | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:45 | "MyWind ... /i /c:" | stringConcatenatedWith |  -endpoint- arg |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:51 | "MyWind ... " + arg | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:51 | "MyWind ... " + arg | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:51 | "MyWind ... " + arg | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:51 | "MyWind ... " + arg | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:12:325:51 | "MyWind ... " + arg | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:325:49:325:51 | arg | stringConcatenatedWith | 'MyWindowCommand \| findstr /i /c:' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:3 | cp | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:3 | cp | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:3 | cp | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:8 | cp.exec | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:8 | cp.exec | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:8 | cp.exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | cp.exec(cmd) | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | cp.exec(cmd) | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | cp.exec(cmd) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | exceptional return of cp.exec(cmd) | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:2:326:13 | exceptional return of cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:5:326:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:5:326:8 | exec | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:5:326:8 | exec | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:5:326:8 | exec | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:5:326:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | contextSurroundingFunctionParameters | (arg) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | enclosingFunctionBody | arg cmd MyWindowCommand \| findstr /i /c: arg cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | enclosingFunctionName | typeofcheck |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:326:10:326:12 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:329:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:329:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:329:0 | this | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:329:0 | this | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:329:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | 'arguments' object of function id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | 'arguments' object of function id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | 'arguments' object of function id | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | 'arguments' object of function id | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | 'arguments' object of function id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | exceptional return of function id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | exceptional return of function id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | exceptional return of function id | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | exceptional return of function id | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | exceptional return of function id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | functio ... rn x;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | functio ... rn x;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | functio ... rn x;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | return of function id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | return of function id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | return of function id | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | return of function id | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:1:331:1 | return of function id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | contextSurroundingFunctionParameters | (x) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:10:329:11 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:329:13:329:13 | x | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:330:9:330:9 | x | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:330:9:330:9 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:330:9:330:9 | x | enclosingFunctionBody | x x |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:330:9:330:9 | x | enclosingFunctionName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:330:9:330:9 | x | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:17 | module.exports.id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:17 | module.exports.id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:17 | module.exports.id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:22 | module. ... id = id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:22 | module. ... id = id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:1:333:22 | module. ... id = id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:8:333:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:8:333:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:8:333:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:16:333:17 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:16:333:17 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:16:333:17 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:21:333:22 | id | assignedToPropName | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:21:333:22 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:21:333:22 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:333:21:333:22 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:28 | module. ... lematic | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:28 | module. ... lematic | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:335:28 | module. ... lematic | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:337:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:337:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:1:337:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:8:335:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:8:335:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:8:335:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:16:335:28 | unproblematic | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:16:335:28 | unproblematic | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:16:335:28 | unproblematic | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | cp | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | cp | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | id | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | id | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | this | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | this | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:335:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | 'arguments' object of anonymous function | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | exceptional return of anonymous function | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | exceptional return of anonymous function | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | functio ... // OK\\n} | assignedToPropName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | return of anonymous function | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | return of anonymous function | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:335:32:337:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:3 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:3 | cp | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:3 | cp | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:8 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:8 | cp.exec | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:8 | cp.exec | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | cp.exec ... test")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | cp.exec ... test")) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | cp.exec ... test")) | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | cp.exec ... test")) | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | cp.exec ... test")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | exceptional return of cp.exec ... test")) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | exceptional return of cp.exec ... test")) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | exceptional return of cp.exec ... test")) | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | exceptional return of cp.exec ... test")) | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:2:336:32 | exceptional return of cp.exec ... test")) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:5:336:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:5:336:8 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:5:336:8 | exec | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:5:336:8 | exec | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:5:336:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- id() |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:10:336:31 | "rm -rf ... "test") | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:23 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:23 | id | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:23 | id | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:23 | id | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:23 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | exceptional return of id("test") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | exceptional return of id("test") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | exceptional return of id("test") | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | exceptional return of id("test") | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | exceptional return of id("test") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:22:336:31 | id("test") | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | CalleeFlexibleAccessPath | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | enclosingFunctionBody | cp exec rm -rf  id test |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | enclosingFunctionName | unproblematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:336:25:336:30 | "test" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:26 | module. ... lematic | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:26 | module. ... lematic | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:339:26 | module. ... lematic | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:341:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:341:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:1:341:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:8:339:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:8:339:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:8:339:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:16:339:26 | problematic | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:16:339:26 | problematic | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:16:339:26 | problematic | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | cp | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | cp | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | id | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | id | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | this | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | this | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:339:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | 'arguments' object of anonymous function | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | 'arguments' object of anonymous function | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | exceptional return of anonymous function | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | exceptional return of anonymous function | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | functio ... OT OK\\n} | assignedToPropName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | return of anonymous function | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | return of anonymous function | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:30:341:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:339:39:339:39 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:3 | cp | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:3 | cp | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:3 | cp | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:8 | cp.exec | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:8 | cp.exec | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:8 | cp.exec | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | cp.exec ...  id(n)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | cp.exec ...  id(n)) | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | cp.exec ...  id(n)) | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | cp.exec ...  id(n)) | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | cp.exec ...  id(n)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | exceptional return of cp.exec ...  id(n)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | exceptional return of cp.exec ...  id(n)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | exceptional return of cp.exec ...  id(n)) | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | exceptional return of cp.exec ...  id(n)) | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:2:340:27 | exceptional return of cp.exec ...  id(n)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:5:340:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:5:340:8 | exec | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:5:340:8 | exec | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:5:340:8 | exec | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:5:340:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- id() |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:10:340:26 | "rm -rf " + id(n) | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:23 | id | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:23 | id | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:23 | id | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:23 | id | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:23 | id | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | exceptional return of id(n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | exceptional return of id(n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | exceptional return of id(n) | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | exceptional return of id(n) | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | exceptional return of id(n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:22:340:26 | id(n) | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | CalleeFlexibleAccessPath | id |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | enclosingFunctionBody | n cp exec rm -rf  id n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | enclosingFunctionName | problematic |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:340:25:340:25 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:27 | module. ... fNumber | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:27 | module. ... fNumber | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:343:27 | module. ... fNumber | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:347:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:347:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:1:347:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:8:343:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:8:343:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:8:343:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:16:343:27 | typeofNumber | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:16:343:27 | typeofNumber | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:16:343:27 | typeofNumber | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | cp | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | cp | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | this | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | this | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:343:30 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | 'arguments' object of anonymous function | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | 'arguments' object of anonymous function | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | exceptional return of anonymous function | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | exceptional return of anonymous function | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | return of anonymous function | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | return of anonymous function | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:31:347:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:343:40:343:40 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:13 | typeof n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:13 | typeof n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:13 | typeof n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:13 | typeof n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:13 | typeof n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | n | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | typeof  ... number" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | typeof  ... number" | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | typeof  ... number" | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | typeof  ... number" | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:6:344:26 | typeof  ... number" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:13:344:13 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:13:344:13 | n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:13:344:13 | n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:13:344:13 | n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:13:344:13 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:19:344:26 | "number" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:19:344:26 | "number" | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:19:344:26 | "number" | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:19:344:26 | "number" | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:344:19:344:26 | "number" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:4 | cp | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:4 | cp | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:4 | cp | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:9 | cp.exec | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:9 | cp.exec | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:9 | cp.exec | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | cp.exec ...  " + n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | cp.exec ...  " + n) | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | cp.exec ...  " + n) | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | cp.exec ...  " + n) | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | cp.exec ...  " + n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | exceptional return of cp.exec ...  " + n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | exceptional return of cp.exec ...  " + n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | exceptional return of cp.exec ...  " + n) | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | exceptional return of cp.exec ...  " + n) | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:3:345:24 | exceptional return of cp.exec ...  " + n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:6:345:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:6:345:9 | exec | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:6:345:9 | exec | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:6:345:9 | exec | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:6:345:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:11:345:23 | "rm -rf " + n | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | contextSurroundingFunctionParameters | (n) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | enclosingFunctionBody | n n number cp exec rm -rf  n |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | enclosingFunctionName | typeofNumber |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:345:23:345:23 | n | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | cp | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | cp | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | this | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | this | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:349:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | 'arguments' object of function boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | 'arguments' object of function boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | 'arguments' object of function boundProblem | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | 'arguments' object of function boundProblem | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | 'arguments' object of function boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | exceptional return of function boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | exceptional return of function boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | exceptional return of function boundProblem | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | exceptional return of function boundProblem | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | exceptional return of function boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | return of function boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | return of function boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | return of function boundProblem | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | return of function boundProblem | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:1:352:1 | return of function boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:10:349:21 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:23:349:26 | safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:349:29:349:34 | unsafe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:3 | cp | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:3 | cp | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:3 | cp | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:8 | cp.exec | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:8 | cp.exec | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:8 | cp.exec | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | cp.exec ... + safe) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | cp.exec ... + safe) | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | cp.exec ... + safe) | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | cp.exec ... + safe) | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | cp.exec ... + safe) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | exceptional return of cp.exec ... + safe) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | exceptional return of cp.exec ... + safe) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | exceptional return of cp.exec ... + safe) | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | exceptional return of cp.exec ... + safe) | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:2:350:26 | exceptional return of cp.exec ... + safe) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:5:350:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:5:350:8 | exec | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:5:350:8 | exec | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:5:350:8 | exec | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:5:350:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:10:350:25 | "rm -rf " + safe | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:350:22:350:25 | safe | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:3 | cp | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:3 | cp | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:3 | cp | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:8 | cp.exec | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:8 | cp.exec | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:8 | cp.exec | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | cp.exec ... unsafe) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | cp.exec ... unsafe) | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | cp.exec ... unsafe) | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | cp.exec ... unsafe) | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | cp.exec ... unsafe) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | exceptional return of cp.exec ... unsafe) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | exceptional return of cp.exec ... unsafe) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | exceptional return of cp.exec ... unsafe) | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | exceptional return of cp.exec ... unsafe) | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:2:351:28 | exceptional return of cp.exec ... unsafe) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:5:351:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:5:351:8 | exec | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:5:351:8 | exec | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:5:351:8 | exec | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:5:351:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:10:351:27 | "rm -rf " + unsafe | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | contextSurroundingFunctionParameters | (safe, unsafe) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | enclosingFunctionBody | safe unsafe cp exec rm -rf  safe cp exec rm -rf  unsafe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | enclosingFunctionName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:351:22:351:27 | unsafe | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:6 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:6 | Object | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:6 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:21 | Object. ... roperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:21 | Object. ... roperty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:354:21 | Object. ... roperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | Object. ... ;\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | Object. ... ;\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | Object. ... ;\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | exceptional return of Object. ... ;\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | exceptional return of Object. ... ;\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:1:358:2 | exceptional return of Object. ... ;\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:8:354:21 | defineProperty | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:8:354:21 | defineProperty | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:8:354:21 | defineProperty | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:28 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:28 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:28 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | CalleeFlexibleAccessPath | Object.defineProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:23:354:36 | module.exports | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:30:354:36 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:30:354:36 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:30:354:36 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | CalleeFlexibleAccessPath | Object.defineProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:39:354:52 | "boundProblem" | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | CalleeFlexibleAccessPath | Object.defineProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:354:55:358:1 | {\\n\\tget: ... );\\n\\t}\\n} | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:355:4 | get | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:355:4 | get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:355:4 | get | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:2:357:2 | get: fu ... e");\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | boundProblem | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | boundProblem | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | boundProblem | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | this | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | this | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:355:6 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | 'arguments' object of method get | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | 'arguments' object of method get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | 'arguments' object of method get | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | 'arguments' object of method get | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | 'arguments' object of method get | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | exceptional return of method get | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | exceptional return of method get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | exceptional return of method get | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | exceptional return of method get | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | exceptional return of method get | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | CalleeFlexibleAccessPath | Object.defineProperty |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | InputAccessPathFromCallee | 2.get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | assignedToPropName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | functio ... e");\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | return of method get | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | return of method get | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | return of method get | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | return of method get | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:355:7:357:2 | return of method get | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:21 | boundProblem | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:21 | boundProblem | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:21 | boundProblem | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:21 | boundProblem | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:21 | boundProblem | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:26 | boundProblem.bind | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:26 | boundProblem.bind | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:26 | boundProblem.bind | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:26 | boundProblem.bind | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:26 | boundProblem.bind | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | assignedToPropName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | boundPr ... "safe") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | exceptional return of boundPr ... "safe") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | exceptional return of boundPr ... "safe") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | exceptional return of boundPr ... "safe") | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | exceptional return of boundPr ... "safe") | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:10:356:40 | exceptional return of boundPr ... "safe") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:23:356:26 | bind | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:23:356:26 | bind | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:23:356:26 | bind | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:23:356:26 | bind | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:23:356:26 | bind | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | CalleeFlexibleAccessPath | boundProblem.bind |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:28:356:31 | this | receiverName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | CalleeFlexibleAccessPath | boundProblem.bind |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | enclosingFunctionBody | boundProblem bind safe |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | enclosingFunctionName | get |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:356:34:356:39 | "safe" | receiverName | boundProblem |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:360:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:360:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:360:0 | this | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:360:0 | this | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:360:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | 'arguments' object of function MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | 'arguments' object of function MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | 'arguments' object of function MyTrainer | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | 'arguments' object of function MyTrainer | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | 'arguments' object of function MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | exceptional return of function MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | exceptional return of function MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | exceptional return of function MyTrainer | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | exceptional return of function MyTrainer | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | exceptional return of function MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | functio ... _args\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | functio ... _args\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | functio ... _args\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | return of function MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | return of function MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | return of function MyTrainer | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | return of function MyTrainer | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:1:362:1 | return of function MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:10:360:18 | MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:360:20:360:23 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:5 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:5 | this | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:5 | this | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:5 | this | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:5 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:16 | this.learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:16 | this.learn_args | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:16 | this.learn_args | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:16 | this.learn_args | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:16 | this.learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:34 | this.le ... rn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:34 | this.le ... rn_args | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:34 | this.le ... rn_args | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:34 | this.le ... rn_args | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:2:361:34 | this.le ... rn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:7:361:16 | learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:7:361:16 | learn_args | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:7:361:16 | learn_args | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:7:361:16 | learn_args | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:7:361:16 | learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:23 | opts | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:23 | opts | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:23 | opts | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:23 | opts | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:23 | opts | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | assignedToPropName | learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:20:361:34 | opts.learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:25:361:34 | learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:25:361:34 | learn_args | contextSurroundingFunctionParameters | (opts) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:25:361:34 | learn_args | enclosingFunctionBody | opts learn_args opts learn_args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:25:361:34 | learn_args | enclosingFunctionName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:361:25:361:34 | learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:9 | MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:9 | MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:9 | MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:19 | MyTrainer.prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:19 | MyTrainer.prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:364:19 | MyTrainer.prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:369:1 | MyTrain ... ; \\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:369:1 | MyTrain ... ; \\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:1:369:1 | MyTrain ... ; \\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:11:364:19 | prototype | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:11:364:19 | prototype | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:11:364:19 | prototype | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:23:369:1 | {\\n\\ttrai ... ; \\n\\t}\\n} | assignedToPropName | prototype |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:23:369:1 | {\\n\\ttrai ... ; \\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:23:369:1 | {\\n\\ttrai ... ; \\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:364:23:369:1 | {\\n\\ttrai ... ; \\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:365:6 | train | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:365:6 | train | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:365:6 | train | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:2:368:2 | train:  ... d); \\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | cp | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | cp | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | this | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | this | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:365:8 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | 'arguments' object of method train | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | 'arguments' object of method train | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | 'arguments' object of method train | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | 'arguments' object of method train | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | 'arguments' object of method train | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | exceptional return of method train | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | exceptional return of method train | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | exceptional return of method train | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | exceptional return of method train | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | exceptional return of method train | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | functio ... d); \\n\\t} | assignedToPropName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | functio ... d); \\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | functio ... d); \\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | functio ... d); \\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | return of method train | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | return of method train | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | return of method train | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | return of method train | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:365:9:368:2 | return of method train | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:13 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:13 | command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:13 | command | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:13 | command | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:13 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command ... + model | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command ... + model | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command ... + model | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command ... + model | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:7:366:56 | command ... + model | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:24 | "learn " | stringConcatenatedWith |  -endpoint- this.learn_args + ' ' + model |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:42 | "learn  ... rn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:42 | "learn  ... rn_args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:42 | "learn  ... rn_args | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:42 | "learn  ... rn_args | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:42 | "learn  ... rn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:48 | "learn  ... s + " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:48 | "learn  ... s + " " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:48 | "learn  ... s + " " | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:48 | "learn  ... s + " " | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:48 | "learn  ... s + " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:56 | "learn  ... + model | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:56 | "learn  ... + model | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:56 | "learn  ... + model | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:56 | "learn  ... + model | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:17:366:56 | "learn  ... + model | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:31 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:31 | this | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:31 | this | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:31 | this | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:31 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:28:366:42 | this.learn_args | stringConcatenatedWith | 'learn ' -endpoint- ' ' + model |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:33:366:42 | learn_args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:33:366:42 | learn_args | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:33:366:42 | learn_args | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:33:366:42 | learn_args | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:33:366:42 | learn_args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:46:366:48 | " " | stringConcatenatedWith | 'learn ' + this.learn_args -endpoint- model |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:366:52:366:56 | model | stringConcatenatedWith | 'learn ' + this.learn_args + ' ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:4 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:4 | cp | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:4 | cp | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:9 | cp.exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:9 | cp.exec | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:9 | cp.exec | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | cp.exec(command) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | cp.exec(command) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | cp.exec(command) | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | cp.exec(command) | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | cp.exec(command) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | exceptional return of cp.exec(command) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | exceptional return of cp.exec(command) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | exceptional return of cp.exec(command) | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | exceptional return of cp.exec(command) | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:3:367:18 | exceptional return of cp.exec(command) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:6:367:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:6:367:9 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:6:367:9 | exec | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:6:367:9 | exec | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:6:367:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | enclosingFunctionBody | command learn  learn_args   model cp exec command |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | enclosingFunctionName | train |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:367:11:367:17 | command | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:24 | module. ... Trainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:24 | module. ... Trainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:24 | module. ... Trainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:36 | module. ... Trainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:36 | module. ... Trainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:1:370:36 | module. ... Trainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:8:370:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:8:370:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:8:370:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:16:370:24 | MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:16:370:24 | MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:16:370:24 | MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:28:370:36 | MyTrainer | assignedToPropName | MyTrainer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:28:370:36 | MyTrainer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:28:370:36 | MyTrainer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:370:28:370:36 | MyTrainer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:373:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | 'arguments' object of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | exceptional return of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | functio ... sult;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:1:403:1 | return of function yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:10:373:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:373:30:373:32 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:8 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:8:374:20 | s = str \|\| '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:14 | str | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:12:374:20 | str \|\| '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:374:19:374:20 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:11 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:6:375:16 | result = '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:375:15:375:16 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:11 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:11:376:15 | i = 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:15:376:15 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:18 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:18:376:26 | i <= 2000 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:23:376:26 | 2000 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:29 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:376:29:376:31 | i++ | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i]  ... == '"') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i]  ... == '"') | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i]  ... == '"') | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i]  ... == '"') | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:7:398:16 | !(s[i]  ... == '"') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:8:398:16 | (s[i] = ... == '"') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:9 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:12 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:377:26 | s[i] === undefined | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:378:15 | s[i] == ... === '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:379:15 | s[i] == ... === '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:380:15 | s[i] == ... === '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:381:15 | s[i] == ... === '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:382:15 | s[i] == ... === '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:383:15 | s[i] == ... === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:384:15 | s[i] == ... === '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:385:15 | s[i] == ... === '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:386:15 | s[i] == ... === '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:387:15 | s[i] == ... === ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:388:15 | s[i] == ... === '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:389:15 | s[i] == ... === '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:390:15 | s[i] == ... === ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:391:15 | s[i] == ... === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:392:15 | s[i] == ... === '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:393:16 | s[i] == ... == '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:394:16 | s[i] == ... == '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:395:16 | s[i] == ... == '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:396:16 | s[i] == ... == '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:397:15 | s[i] == ... === '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:9:398:15 | s[i] == ... === '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:11:377:11 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:377:18:377:26 | undefined | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:4:378:15 | s[i] === '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:6:378:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:378:13:378:15 | '>' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:4:379:15 | s[i] === '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:6:379:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:379:13:379:15 | '<' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:4:380:15 | s[i] === '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:6:380:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:380:13:380:15 | '*' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:4:381:15 | s[i] === '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:6:381:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:381:13:381:15 | '?' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:4:382:15 | s[i] === '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:6:382:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:382:13:382:15 | '[' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:4:383:15 | s[i] === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:6:383:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:383:13:383:15 | ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:4:384:15 | s[i] === '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:6:384:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:384:13:384:15 | '\|' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:4:385:15 | s[i] === '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:6:385:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:385:13:385:15 | '\\u02da' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:4:386:15 | s[i] === '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:6:386:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:386:13:386:15 | '$' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:4:387:15 | s[i] === ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:6:387:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:387:13:387:15 | ';' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:4:388:15 | s[i] === '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:6:388:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:388:13:388:15 | '&' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:4:389:15 | s[i] === '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:6:389:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:389:13:389:15 | '(' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:4:390:15 | s[i] === ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:6:390:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:390:13:390:15 | ')' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:4:391:15 | s[i] === ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:6:391:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:391:13:391:15 | ']' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:4:392:15 | s[i] === '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:6:392:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:392:13:392:15 | '#' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:4:393:16 | s[i] === '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:6:393:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:393:13:393:16 | '\\\\' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:4:394:16 | s[i] === '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:6:394:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:394:13:394:16 | '\\t' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:4:395:16 | s[i] === '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:6:395:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:395:13:395:16 | '\\n' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:4:396:16 | s[i] === '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:6:396:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:396:13:396:16 | '\\'' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:4:397:15 | s[i] === '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:6:397:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:397:13:397:15 | '`' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:4 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:7 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:4:398:15 | s[i] === '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:6:398:6 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:398:13:398:15 | '"' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:9 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result  ...  + s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result  ...  + s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result  ...  + s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result  ...  + s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:4:399:25 | result  ...  + s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:18 | result | stringConcatenatedWith |  -endpoint- s.? |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:13:399:25 | result + s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:22 | s | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:22:399:25 | s[i] | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:399:24:399:24 | i | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | contextSurroundingFunctionParameters | (str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | enclosingFunctionBody | str s str  result  i 0 i 2000 i s i undefined s i > s i < s i * s i ? s i [ s i ] s i \| s i \u02da s i $ s i ; s i & s i ( s i ) s i ] s i # s i \\ s i \t s i \n s i ' s i ` s i " result result s i result |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | enclosingFunctionName | yetAnohterSanitizer |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:402:9:402:14 | result | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:405:25 | module. ... itizer3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:1:410:1 | module. ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:8:405:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:16:405:25 | sanitizer3 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:405:28 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | assignedToPropName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | functio ... // OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:29:410:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:405:39:405:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:2:406:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:5:406:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:10:406:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:406:22:406:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:14 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitiz ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:6:408:42 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:36 | yetAnohterSanitizer | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | exceptional return of yetAnoh ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:408:18:408:42 | yetAnoh ... r(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:2:409:31 | exceptional return of cp.exec ... itized) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:5:409:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:10:409:30 | "rm -rf ... nitized | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | enclosingFunctionBody | name cp exec rm -rf  name sanitized yetAnohterSanitizer name cp exec rm -rf  sanitized |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | enclosingFunctionName | sanitizer3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:409:22:409:30 | sanitized | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:8 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:7:412:35 | cp = re ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:18 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | exceptional return of require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:12:412:35 | require ... ocess") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:412:20:412:34 | "child_process" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:11 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:7:413:22 | spawn = cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:16 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:15:413:22 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:413:18:413:22 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:414:26 | module. ... lOption | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:1:429:1 | module. ... ild`.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:8:414:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:16:414:26 | shellOption | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:414:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | assignedToPropName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | functio ... ild`.\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:30:429:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:414:40:414:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:2:415:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:5:415:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:10:415:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:415:22:415:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:12 | cp.execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ...  => {}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ...  => {}) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ...  => {}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ...  => {}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | cp.exec ...  => {}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ...  => {}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ...  => {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ...  => {}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ...  => {}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:2:417:66 | exceptional return of cp.exec ...  => {}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:5:417:12 | execFile | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:14:417:17 | "rm" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:20:417:32 | ["-rf", name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:21:417:25 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:28:417:31 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:35:417:47 | {shell: true} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:40 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:36:417:46 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | InputAccessPathFromCallee | 2.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:43:417:46 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | CalleeFlexibleAccessPath | cp.execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | InputArgumentIndex | 3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | contextSurroundingFunctionParameters | (name)\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | (err, out) => {} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:50:417:65 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | contextSurroundingFunctionParameters | (name)\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:51:417:53 | err | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | contextSurroundingFunctionParameters | (name)\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:417:56:417:58 | out | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:9 | cp.spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ...  true}) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | cp.spaw ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:2:418:45 | exceptional return of cp.spaw ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:5:418:9 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:11:418:14 | "rm" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:17:418:29 | ["-rf", name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:18:418:22 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:25:418:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:32:418:44 | {shell: true} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:37 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:33:418:43 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | InputAccessPathFromCallee | 2.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:418:40:418:43 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:16 | cp.execFileSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ...  true}) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | cp.exec ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:2:419:52 | exceptional return of cp.exec ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:5:419:16 | execFileSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:18:419:21 | "rm" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:24:419:36 | ["-rf", name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:25:419:29 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:32:419:35 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:39:419:51 | {shell: true} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:44 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:40:419:50 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | InputAccessPathFromCallee | 2.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:419:47:419:50 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:13 | cp.spawnSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ...  true}) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | cp.spaw ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ...  true}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ...  true}) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ...  true}) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:2:420:49 | exceptional return of cp.spaw ...  true}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:5:420:13 | spawnSync | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:15:420:18 | "rm" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:21:420:33 | ["-rf", name] | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:22:420:26 | "-rf" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:29:420:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:36:420:48 | {shell: true} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:41 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:37:420:47 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | CalleeFlexibleAccessPath | cp.spawnSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | InputAccessPathFromCallee | 2.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:420:44:420:47 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:16 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_O ... : true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:8:422:32 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:20:422:32 | {shell: true} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:25 | shell | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:21:422:31 | shell: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:422:28:422:31 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:2:424:40 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:8:424:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:14:424:28 | ["first", name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:15:424:21 | "first" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:24:424:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:424:31:424:39 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:8 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:6:425:13 | arr = [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:425:12:425:13 | [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:4 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:9 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | arr.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:2:426:15 | exceptional return of arr.push(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:6:426:9 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | CalleeFlexibleAccessPath | arr.push |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:426:11:426:14 | name | receiverName | arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:2:427:28 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:8:427:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:14:427:16 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:427:19:427:27 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:6 | spawn | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | exceptional return of spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:2:428:70 | spawn(" ... WN_OPT) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:8:428:11 | "rm" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:18 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | build(" ...  + '-') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ...  + '-') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ...  + '-') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ...  + '-') | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ...  + '-') | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:14:428:58 | exceptional return of build(" ...  + '-') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | CalleeFlexibleAccessPath | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:20:428:25 | "node" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:51 | (name ? ... ' : '') | stringConcatenatedWith |  -endpoint- '-' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | CalleeFlexibleAccessPath | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:28:428:57 | (name ? ... ) + '-' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:32 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ?  ... :' : '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ?  ... :' : '' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ?  ... :' : '' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ?  ... :' : '' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:29:428:50 | name ?  ... :' : '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:39 | name | stringConcatenatedWith |  -endpoint- ':' |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:36:428:45 | name + ':' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:43:428:45 | ':' | stringConcatenatedWith | name -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:49:428:50 | '' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:55:428:57 | '-' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | enclosingFunctionBody | name cp exec rm -rf  name cp execFile rm -rf name shell true err out cp spawn rm -rf name shell true cp execFileSync rm -rf name shell true cp spawnSync rm -rf name shell true SPAWN_OPT shell true spawn rm first name SPAWN_OPT arr arr push name spawn rm arr SPAWN_OPT spawn rm build node name name :  - SPAWN_OPT |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | enclosingFunctionName | shellOption |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:428:61:428:69 | SPAWN_OPT | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:431:0 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | 'arguments' object of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | exceptional return of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ...  arr;\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ...  arr;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | functio ...  arr;\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:1:438:1 | return of function build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:10:431:14 | build | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:16:431:20 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:431:23:431:26 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:8 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:6:432:13 | arr = [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:432:12:432:13 | [] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:14 | something | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | exceptional return of something() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:16 | something() | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:6:433:25 | something() === 'gm' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:433:22:433:25 | 'gm' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:5 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:10 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | arr.push('convert') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:3:434:21 | exceptional return of arr.push('convert') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:7:434:10 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | CalleeFlexibleAccessPath | arr.push |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:434:12:434:20 | 'convert' | receiverName | arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:6 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:2:435:25 | first & ... (first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:13 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:18 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | arr.push(first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:11:435:25 | exceptional return of arr.push(first) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:15:435:18 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | CalleeFlexibleAccessPath | arr.push |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:435:20:435:24 | first | receiverName | arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:5 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:2:436:23 | last && ... h(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:12 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:17 | arr.push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | arr.push(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:10:436:23 | exceptional return of arr.push(last) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:14:436:17 | push | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | CalleeFlexibleAccessPath | arr.push |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:436:19:436:22 | last | receiverName | arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | contextSurroundingFunctionParameters | (first, last) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | enclosingFunctionBody | first last arr something gm arr push convert first arr push first last arr push last arr |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | enclosingFunctionName | build |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:437:9:437:11 | arr | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:13 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncEx ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:5:440:40 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:23 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | exceptional return of require ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:17:440:40 | require ... ecute") | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:440:25:440:39 | "async-execute" | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:441:25 | module. ... ncStuff | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:1:443:1 | module. ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:8:441:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:16:441:25 | asyncStuff | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:441:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | assignedToPropName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | functio ... OT OK\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:29:443:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:441:39:441:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:10 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:2:442:28 | exceptional return of asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:20 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | CalleeFlexibleAccessPath | asyncExec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | calleeImports | async-execute |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:12:442:27 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | enclosingFunctionName | asyncStuff |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:442:24:442:27 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:445:13 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:7:449:1 | myFuncs ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:445:17:449:1 | {\\n\\tmyFu ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:446:7 | myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:2:448:2 | myFunc: ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:446:9 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | 'arguments' object of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | exceptional return of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | assignedToPropName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | functio ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:10:448:2 | return of method myFunc | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:446:20:446:23 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:11 | asyncExec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:3:447:29 | exceptional return of asyncEx ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:21 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | CalleeFlexibleAccessPath | asyncExec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | calleeImports | async-execute |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:13:447:28 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | enclosingFunctionBody | name asyncExec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | enclosingFunctionName | myFunc |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:447:25:447:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:22 | module. ... blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:1:451:27 | module. ... ty = {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:8:451:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:16:451:22 | blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | assignedToPropName | blabity |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:451:26:451:27 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:6 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:453:23 | Object. ... perties | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | Object. ... \\t)\\n\\t)\\n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:1:470:1 | exceptional return of Object. ... \\t)\\n\\t)\\n) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:453:8:453:23 | defineProperties | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:7 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:15 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | CalleeFlexibleAccessPath | Object.defineProperties |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:2:454:23 | module. ... blabity | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:9:454:15 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:454:17:454:23 | blabity | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:7 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:455:14 | Object.assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | CalleeFlexibleAccessPath | Object.defineProperties |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | Object. ... \\n\\t\\t)\\n\\t) | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:2:469:2 | exceptional return of Object. ... \\n\\t\\t)\\n\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:455:9:455:14 | assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:456:3:456:4 | {} | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:8 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:16 | Object.entries | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | Object. ... yFuncs) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:25 | exceptional return of Object. ... yFuncs) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:457:32 | Object. ... .reduce | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | Object. ... \\t{}\\n\\t\\t) | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:3:468:3 | exceptional return of Object. ... \\t{}\\n\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:10:457:16 | entries | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | CalleeFlexibleAccessPath | Object.entries |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:18:457:24 | myFuncs | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:457:27:457:32 | reduce | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | CalleeFlexibleAccessPath | Object.entries().reduce |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | (props, ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:4:466:4 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:5:458:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | [ key, value ] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:12:458:25 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:14:458:16 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:19:458:23 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:36 | Object | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:458:43 | Object.assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | Object. ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:31:466:4 | exceptional return of Object. ... },\\n\\t\\t\\t) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:458:38:458:43 | assign | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:459:5:459:9 | props | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:460:5:465:5 | {\\n\\t\\t\\t\\t\\t ... ,\\n\\t\\t\\t\\t} | receiverName | Object |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:6:464:6 | [key]:  ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:7:461:9 | key | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | InputAccessPathFromCallee | 1.? |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:461:13:464:6 | {\\n\\t\\t\\t\\t\\t ... \\n\\t\\t\\t\\t\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | InputAccessPathFromCallee | 1.?.value |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | assignedToPropName | value |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:462:7:462:11 | value | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:18 | configurable | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:7:463:24 | configurable: true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | InputAccessPathFromCallee | 1.?.configurable |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | assignedToPropName | configurable |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | contextSurroundingFunctionParameters | (props, ?) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | enclosingFunctionBody | props key value Object assign props key value configurable true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | enclosingFunctionName | reduce#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:463:21:463:24 | true | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | CalleeFlexibleAccessPath | Object.entries().reduce |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:467:4:467:5 | {} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:10 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path =  ... 'path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path =  ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:7:472:28 | path =  ... 'path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:20 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | exceptional return of require('path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:14:472:28 | require('path') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:472:22:472:27 | 'path' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:17 | {promisify} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:7:473:35 | {promis ... 'util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:8:473:16 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:27 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | exceptional return of require('util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:21:473:35 | require('util') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:473:29:473:34 | 'util' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:10 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec =  ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec =  ... ).exec) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:7:475:53 | exec =  ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:22 | promisify | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | exceptional return of promisi ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:14:475:53 | promisi ... ).exec) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:30 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | exceptional return of require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:47 | require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | CalleeFlexibleAccessPath | promisify |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:24:475:52 | require ... ').exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:32:475:46 | 'child_process' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:475:49:475:52 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:477:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:1:480:1 | module. ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:8:477:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:477:17 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | 'arguments' object of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | exceptional return of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | functio ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:18:480:1 | return of function check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:27:477:31 | check | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:477:33:477:38 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:13 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:11:478:62 | cmd = p ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:20 | path | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:25 | path.join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | exceptional return of path.jo ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:17:478:62 | path.jo ... ry -v') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:22:478:25 | join | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:32 | config | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:27:478:46 | config.installedPath | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:34:478:46 | installedPath | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | CalleeFlexibleAccessPath | path.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | calleeImports | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:478:49:478:61 | 'myBinary -v' | receiverName | path |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:15 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exceptional return of exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:12:479:20 | exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | calleeImports | util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | contextSurroundingFunctionParameters | (config) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | enclosingFunctionBody | config cmd path join config installedPath myBinary -v exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | enclosingFunctionName | check |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:479:17:479:19 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:482:26 | module. ... tConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:1:486:1 | module. ... rgs);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:8:482:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:16:482:26 | splitConcat | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:482:29 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | assignedToPropName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | functio ... rgs);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:30:486:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:482:40:482:43 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:9 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args =  ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args =  ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args =  ...  + name | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args =  ...  + name | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:6:483:33 | args =  ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:26 | ' my name is ' | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ...  + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ...  + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ...  + name | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ...  + name | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:13:483:33 | ' my na ...  + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:483:30:483:33 | name | stringConcatenatedWith | ' my name is ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:6:484:17 | cmd = 'echo' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:484:12:484:17 | 'echo' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | cp.exec(cmd + args) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:2:485:20 | exceptional return of cp.exec(cmd + args) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:5:485:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:12 | cmd | stringConcatenatedWith |  -endpoint- args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:10:485:19 | cmd + args | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | enclosingFunctionBody | name args  my name is  name cmd echo cp exec cmd args |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | enclosingFunctionName | splitConcat |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:485:16:485:19 | args | stringConcatenatedWith | 'echo' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:488:24 | module. ... Command | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:1:501:2 | module. ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:8:488:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:16:488:24 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:488:27 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | functio ... cmd);\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:491:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | exceptional return of functio ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | assignedToPropName | myCommand |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:28:501:2 | functio ... K\\n\\t}\\n}) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:488:38:488:46 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:8 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:6:489:37 | cmd = ` ... mmand}` | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:12:489:37 | `cd ${c ... mmand}` | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:13:489:15 | cd  | stringConcatenatedWith |  -endpoint- cwd + ' ; ' + myCommand |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:18:489:20 | cwd | stringConcatenatedWith | 'cd ' -endpoint- ' ; ' + myCommand |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:22:489:24 |  ;  | stringConcatenatedWith | 'cd ' + cwd -endpoint- myCommand |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:489:27:489:35 | myCommand | stringConcatenatedWith | 'cd ' + cwd + ' ; ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:2:490:13 | exceptional return of cp.exec(cmd) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:5:490:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | contextSurroundingFunctionParameters | (myCommand) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | enclosingFunctionBody | myCommand cmd cd  cwd  ;  myCommand cp exec cmd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:490:10:490:12 | cmd | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:1 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:493:2 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:493:2:501:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:494:12 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:6:496:2 | MyThing ... ss')\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:494:16:496:2 | {\\n\\t\\tcp: ... ss')\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:3:495:30 | cp: req ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:13 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | exceptional return of require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | assignedToPropName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:7:495:30 | require ... ocess') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:495:15:495:29 | 'child_process' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:7 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:15 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:498:31 | module. ... ctThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:2:500:2 | module. ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:9:498:15 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:17:498:31 | myIndirectThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:498:34 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | assignedToPropName | myIndirectThing |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | functio ... T OK\\n\\t} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:35:500:2 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:498:45:498:48 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:9 | MyThing | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:12 | MyThing.cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:17 | MyThing.cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | MyThing ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:3:499:35 | exceptional return of MyThing ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:11:499:12 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:14:499:17 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:27 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | CalleeFlexibleAccessPath | MyThing.cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:19:499:34 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | contextSurroundingFunctionParameters | ()\n(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | enclosingFunctionBody | MyThing cp require child_process module exports myIndirectThing name MyThing cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:499:31:499:34 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:7 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:5:504:33 | imp = r ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:17 | require | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | exceptional return of require ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:11:504:33 | require ... orted') | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:504:19:504:32 | './isImported' | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:10:505:13 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:505:18:505:20 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:8 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:16 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:22 | module.exports[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:3:506:34 | module. ... p[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:10:506:16 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:18:506:21 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:28 | imp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:26:506:34 | imp[name] | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:506:30:506:33 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:6 | module | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:14 | module.exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:509:25 | module. ... itizer4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:1:547:1 | module. ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:8:509:14 | exports | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:16:509:25 | sanitizer4 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:509:28 | this | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | 'arguments' object of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | exceptional return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | assignedToPropName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | functio ... OK\\n\\t}\\n} | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:29:547:1 | return of anonymous function | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:509:39:509:42 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:3 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:8 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:2:510:26 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:5:510:8 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:10:510:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:510:22:510:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | exceptional return of isNaN(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:512:6:512:16 | isNaN(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:3:513:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:6:513:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:11:513:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:513:23:513:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:3:515:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:6:515:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:11:515:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:515:23:515:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | exceptional return of isNaN(p ... (name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:6:518:26 | isNaN(p ... (name)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:19 | parseInt | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:12:518:25 | exceptional return of parseInt(name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | CalleeFlexibleAccessPath | parseInt |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:518:21:518:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:3:519:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:6:519:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:11:519:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:519:23:519:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:3:521:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:6:521:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:11:521:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:521:23:521:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | exceptional return of isNaN(+name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:6:524:17 | isNaN(+name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:524:13:524:16 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:3:525:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:6:525:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:11:525:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:525:23:525:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:3:527:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:6:527:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:11:527:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:527:23:527:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | exceptional return of isNaN(p ... e, 10)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:6:530:30 | isNaN(p ... e, 10)) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:19 | parseInt | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:12:530:29 | exceptional return of parseInt(name, 10) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | CalleeFlexibleAccessPath | parseInt |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:21:530:24 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | CalleeFlexibleAccessPath | parseInt |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:530:27:530:28 | 10 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:3:531:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:6:531:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:11:531:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:531:23:531:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:3:533:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:6:533:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:11:533:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:533:23:533:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | exceptional return of isNaN(name - 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:6:536:20 | isNaN(name - 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:12:536:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:536:19:536:19 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:3:537:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:6:537:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:11:537:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:537:23:537:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:3:539:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:6:539:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:11:539:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:539:23:539:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:10 | isNaN | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | exceptional return of isNaN(name \| 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:6:542:20 | isNaN(name \| 0) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:12:542:15 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:542:19:542:19 | 0 | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:3:543:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:6:543:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:11:543:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:543:23:543:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:4 | cp | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:9 | cp.exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:3:545:27 | exceptional return of cp.exec ... + name) | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:6:545:9 | exec | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:19 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:11:545:26 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | contextFunctionInterfaces | Cla5(name)\nMyTrainer(opts)\naccessSync(name)\narrays(name)\nasyncStuff(name)\nbar(name)\nbar(name)\nbla(name)\nblackList2(name)\nblacklistOfChars(name)\nboundProblem(safe, unsafe)\nbuild(first, last)\ncheck(config)\ncla()\ncla2()\ncleanInput(s)\ncmd(command, name)\nconstructor()\nconstructor(name)\nconstructor(name)\nexports(name)\nflow(name)\nfoo(name)\nfoo(name)\nformat(name)\nget()\ngoodSanitizer(name)\nguard(name)\nguard2(name)\nid(x)\nindirect(name)\nindirect2(name)\nmethod(name)\nmethod(name)\nmyExec(cmd)\nmyFunc(name)\nmyIndirectThing(name)\nmz(name)\nproblematic(n)\nsafe(name)\nsanitizeShellString(str)\nsanitizer(name)\nsanitizer2(name)\nsanitizer3(name)\nsanitizer4(name)\nsanitizerProperty(obj)\nshellOption(name)\nsplitConcat(name)\nstart(opts)\nstringConcat(name)\ntrain()\ntypeofNumber(n)\ntypeofcheck(arg)\ntypeofcheck(name)\nunproblematic()\nvalid(name)\nwha(name)\nwhitelistOfChars(name)\nyetAnohterSanitizer(str) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | enclosingFunctionBody | name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name cp exec rm -rf  name cp exec rm -rf  name isNaN name cp exec rm -rf  name cp exec rm -rf  name isNaN parseInt name 10 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name isNaN name 0 cp exec rm -rf  name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | enclosingFunctionName | sanitizer4 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | fileImports | ./isImported ./lib2.js async-execute child_process fs mz/child_process path printf util |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/lib.js:545:23:545:26 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:16 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:10:1:33 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:1:18:1:32 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:1:5:1 | module. ... ule. \\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | functio ... ule. \\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/other.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:5:1:33 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:16 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:10:1:33 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:1:18:1:32 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:3:15 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | functio ... file.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:16:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:3:26:3:29 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:11 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:5:4:29 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:8:4:11 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:21 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:13:4:28 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/compiled-file.ts:4:25:4:28 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:5:1:33 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:16 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:10:1:33 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:1:18:1:32 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:1:5:1 | module. ... file.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | functio ... file.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib2/special-file.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:6 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:5:1:33 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:16 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:10:1:33 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:1:18:1:32 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:1:5:1 | module. ... gged.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | functio ... gged.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib3/my-file.ts:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:0 | this | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | dispatch | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | module | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:1:1:1 | require | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:1:14 | dispatch | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatc ... ub"),\\n} | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:7:4:1 | dispatch | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n  GET ... ub"),\\n} | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n  GET ... ub"),\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:1:18:4:1 | {\\n  GET ... ub"),\\n} | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:5 | GET | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:3:2:23 | GET: re ... ./bla") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:14 | require | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | exceptional return of require("./bla") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | assignedToPropName | GET |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:8:2:23 | require("./bla") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:2:16:2:22 | "./bla" | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:6 | POST | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:3:3:27 | POST: r ... ubsub") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:15 | require | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | exceptional return of require("./subsub") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | assignedToPropName | POST |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:9:3:27 | require("./subsub") | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:3:17:3:26 | "./subsub" | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:6 | module | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:14 | module.exports | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:6:18 | module.exports.foo | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:1:8:1 | module. ... ame);\\n} | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:8:6:14 | exports | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:16:6:18 | foo | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | dispatch | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:6:21 | this | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | 'arguments' object of anonymous function | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | exceptional return of anonymous function | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | functio ... ame);\\n} | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:22:8:1 | return of anonymous function | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:32:6:35 | name | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:6:38:6:41 | type | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:10 | dispatch | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:16 | dispatch[type] | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | dispatch[type](name) | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:3:7:22 | exceptional return of dispatch[type](name) | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:12:7:15 | type | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | CalleeFlexibleAccessPath | dispatch.? |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | contextFunctionInterfaces | foo(name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | contextSurroundingFunctionParameters | (name, type) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | enclosingFunctionBody | name type dispatch type name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | fileImports | ./bla ./subsub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/index.js:7:18:7:21 | name | receiverName | dispatch |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:8 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:7:1:35 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:18 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:12:1:35 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:1:20:1:34 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:1:5:1 | module. ... gged.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | functio ... gged.\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib4/subsub.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:1:1:1:0 | this | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:2:6 | define | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ...   };\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ...   };\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | define( ...   };\\n}) | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ...   };\\n}) | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ...   };\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:1:6:2 | exceptional return of define( ...   };\\n}) | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:2:7 | this | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | 'arguments' object of anonymous function | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | exceptional return of anonymous function | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n  };\\n} | CalleeFlexibleAccessPath | define |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n  };\\n} | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n  };\\n} | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n  };\\n} | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | functio ... \\n  };\\n} | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:8:6:1 | return of anonymous function | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:2:18:2:24 | require | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n    a ... "),\\n  } | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n    a ... "),\\n  } | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n    a ... "),\\n  } | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n    a ... "),\\n  } | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:3:10:5:3 | {\\n    a ... "),\\n  } | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:10 | amdSub | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:5:4:31 | amdSub: ... mdSub") | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:19 | require | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | exceptional return of require("./amdSub") | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | assignedToPropName | amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:13:4:31 | require("./amdSub") | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | contextFunctionInterfaces |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | contextSurroundingFunctionParameters | (require) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | enclosingFunctionBody | require amdSub require ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | enclosingFunctionName | define#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amd.js:4:21:4:30 | "./amdSub" | fileImports | ./amdSub |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:0 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:1:1:1 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:8 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:7:1:35 | cp = re ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:18 | require | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | exceptional return of require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:12:1:35 | require ... ocess") | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:1:20:1:34 | "child_process" | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:6 | module | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:3:14 | module.exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:1:5:1 | module. ... d.js`\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:8:3:14 | exports | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:3:17 | this | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | exceptional return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | functio ... d.js`\\n} | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:18:5:1 | return of anonymous function | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:3:28:3:31 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:3 | cp | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:8 | cp.exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:5:4:8 | exec | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | contextFunctionInterfaces | exports(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | fileImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/amdSub.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:0 | this | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | module | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:1:1:1 | require | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:6 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:5:1:33 | cp = re ... ocess") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:16 | require | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | exceptional return of require ... ocess") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:10:1:33 | require ... ocess") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:1:18:1:32 | "child_process" | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:6 | module | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:3:14 | module.exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:1:5:1 | module. ... gged.\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:8:3:14 | exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:3:17 | this | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | assignedToPropName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | functio ... gged.\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:18:5:1 | return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:3:28:3:31 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:3 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:8 | cp.exec | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | cp.exec ... + name) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:2:4:26 | exceptional return of cp.exec ... + name) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:5:4:8 | exec | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:10:4:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | enclosingFunctionName | exports |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:4:22:4:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:6 | module | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:14 | module.exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:7:18 | module.exports.foo | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:1:9:1 | module. ... st.js\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:8:7:14 | exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:16:7:18 | foo | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:7:21 | this | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | assignedToPropName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | functio ... st.js\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:22:9:1 | return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:7:32:7:35 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:3 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:8 | cp.exec | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | cp.exec ... + name) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:2:8:26 | exceptional return of cp.exec ... + name) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:5:8:8 | exec | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:18 | "rm -rf " | stringConcatenatedWith |  -endpoint- name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | CalleeFlexibleAccessPath | cp.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:10:8:25 | "rm -rf " + name | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | contextSurroundingFunctionParameters | (name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | enclosingFunctionBody | name cp exec rm -rf  name |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | enclosingFunctionName | foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:8:22:8:25 | name | stringConcatenatedWith | 'rm -rf ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:6 | module | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:14 | module.exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:18 | module.exports.amd | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:1:11:40 | module. ... md.js") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:8:11:14 | exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:16:11:18 | amd | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:28 | require | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | exceptional return of require("./amd.js") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | assignedToPropName | amd |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:22:11:40 | require("./amd.js") | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:11:30:11:39 | "./amd.js" | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:6 | module | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:14 | module.exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:13:25 | module. ... ToShell | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:1:15:1 | module. ... OT OK\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:8:13:14 | exports | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:16:13:25 | arrToShell | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:13:28 | this | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | 'arguments' object of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | exceptional return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | assignedToPropName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | functio ... OT OK\\n} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:29:15:1 | return of anonymous function | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:39:13:41 | cmd | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:13:44:13:46 | arr | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:6 | cp | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:12 | cp.spawn | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ...  true}) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ...  true}) | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ...  true}) | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ...  true}) | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | cp.spaw ...  true}) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ...  true}) | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ...  true}) | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ...  true}) | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:5:14:40 | exceptional return of cp.spaw ...  true}) | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:8:14:12 | spawn | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:14:14:19 | "echo" | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:22:14:24 | arr | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:27:14:39 | {shell: true} | receiverName | cp |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:32 | shell | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:28:14:38 | shell: true | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | CalleeFlexibleAccessPath | cp.spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | InputAccessPathFromCallee | 2.shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | assignedToPropName | shell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | contextFunctionInterfaces | arrToShell(cmd, arr)\nexports(name)\nfoo(name) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | contextSurroundingFunctionParameters | (cmd, arr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | enclosingFunctionBody | cmd arr cp spawn echo arr shell true |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | enclosingFunctionName | arrToShell |
| autogenerated/ShellCommandInjectionFromEnvironment/UnsafeShellCommandConstruction/lib/subLib/index.js:14:35:14:38 | true | fileImports | ./amd.js child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:0 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:1:1:1 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:11 | express | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:5:1:32 | express ... press') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:21 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | exceptional return of require('express') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:15:1:32 | require('express') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:1:23:1:31 | 'express' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:17 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_p ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:5:2:44 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:27 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | exceptional return of require ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:21:2:44 | require ... ocess') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:2:29:2:43 | 'child_process' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:12 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSyn ... xecSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:5:3:37 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:28 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:16:3:37 | child_p ... xecSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:3:30:3:37 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:8 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec =  ... ss.exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec =  ... ss.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:5:4:29 | exec =  ... ss.exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:24 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:12:4:29 | child_process.exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:4:26:4:29 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:9 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:5:5:31 | spawn = ... s.spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:25 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:13:5:31 | child_process.spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:5:27:5:31 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:13 | spawnSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:5:6:39 | spawnSy ... awnSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:29 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:17:6:39 | child_p ... awnSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:6:31:6:39 | spawnSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:6 | fs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:5:7:22 | fs = require('fs') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:16 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | exceptional return of require('fs') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:10:7:22 | require('fs') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:7:18:7:21 | 'fs' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:7 | app | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:5:8:19 | app = express() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:17 | express | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | exceptional return of express() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:8:11:8:19 | express() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:1:10:43 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:6:10:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:20 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:21:10:42 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:31:10:33 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:10:36:10:38 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:12:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exceptional return of exec("c ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:1:14:2 | exec("c ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:17 | "cat /proc/" | stringConcatenatedWith |  -endpoint- id + '/status' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:22 | "cat /proc/" + id | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:6:12:34 | "cat /p ... status" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:21:12:22 | id | stringConcatenatedWith | 'cat /proc/' -endpoint- '/status' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:26:12:34 | "/status" | stringConcatenatedWith | 'cat /proc/' + id -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:12:36 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:37:14:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:47:12:49 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:12:52:12:54 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:8 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:12 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:2:13:17 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:10:13:12 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:13:14:13:16 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | exceptional return of execSyn ... uinfo') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:29 | execSyn ... uinfo') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:38 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:1:16:40 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:10:16:28 | 'cat /proc/cpuinfo' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:16:31:16:38 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:1:18:26 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:10:18:25 | `cat ${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:11:18:14 | cat  | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:18:17:18:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | exceptional return of execSyn ... wc -l') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:1:20:36 | execSyn ... wc -l') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:20:10:20:35 | 'cat pa ...  wc -l' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | exceptional return of execSyn ... o/bar') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:38 | execSyn ... o/bar') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:47 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:1:22:49 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:10:22:37 | 'cat /p ... oo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:22:40:22:47 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | exceptional return of execSyn ... o/bar`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:35 | execSyn ... o/bar`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:44 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:1:24:46 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:10:24:34 | `cat ${ ... oo/bar` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:11:24:14 | cat  | stringConcatenatedWith |  -endpoint- newpath + ' /foo/bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:17:24:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' /foo/bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 |  /foo/bar | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 |  /foo/bar | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 |  /foo/bar | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:25:24:33 |  /foo/bar | stringConcatenatedWith | 'cat ' + newpath -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:24:37:24:44 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exceptional return of exec(`c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:1:26:58 | exec(`c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:6:26:32 | `cat ${ ... ep foo` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:7:26:10 | cat  | stringConcatenatedWith |  -endpoint- newpath + ' \| grep foo' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:13:26:19 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' \| grep foo' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 |  \| grep foo | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 |  \| grep foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 |  \| grep foo | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:21:26:31 |  \| grep foo | stringConcatenatedWith | 'cat ' + newpath -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:34 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | functio ... ut) { } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:35:26:57 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:45:26:47 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:26:50:26:52 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ...  1000}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ...  1000}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | exceptional return of execSyn ...  1000}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ...  1000}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ...  1000}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:1:28:39 | execSyn ...  1000}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:10:28:25 | `cat ${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:11:28:14 | cat  | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:17:28:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:28:28:38 | {uid: 1000} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:31 | uid | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:29:28:37 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | InputAccessPathFromCallee | 1.uid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | assignedToPropName | uid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:28:34:28:37 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exceptional return of exec('c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:1:30:64 | exec('c ... t) { }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:6:30:23 | 'cat *.js \| wc -l' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:26:30:38 | { cwd: './' } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:30 | cwd | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:28:30:36 | cwd: './' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | InputAccessPathFromCallee | 1.cwd |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | assignedToPropName | cwd |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:33:30:36 | './' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:40 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | functio ... ut) { } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:41:30:63 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:51:30:53 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:30:56:30:58 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:1:32:34 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:10:32:33 | `cat fo ... wpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:11:32:22 | cat foo/bar/ | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:32:25:32:31 | newpath | stringConcatenatedWith | 'cat foo/bar/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | exceptional return of execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:1:34:54 | execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:10:34:33 | `cat fo ... wpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:11:34:22 | cat foo/bar/ | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:25:34:31 | newpath | stringConcatenatedWith | 'cat foo/bar/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:36:34:53 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:44 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:37:34:52 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:34:47:34:52 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | exceptional return of execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:1:36:77 | execSyn ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:10:36:33 | "/bin/c ... puinfo" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:36:36:76 | { uid:  ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:40 | uid | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:38:36:46 | uid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | InputAccessPathFromCallee | 1.uid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | assignedToPropName | uid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:43:36:46 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:51 | gid | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:49:36:57 | gid: 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | InputAccessPathFromCallee | 1.gid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | assignedToPropName | gid |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:54:36:57 | 1000 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:67 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:60:36:75 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:36:70:36:75 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | exceptional return of execSyn ... r/baz') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:43 | execSyn ... r/baz') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:52 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:1:38:54 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:10:38:42 | 'cat /p ... ar/baz' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:38:45:38:52 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | exceptional return of execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:40 | execSyn ... path}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:49 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:1:40:51 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:10:40:39 | `cat ${ ... tpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:11:40:14 | cat  | stringConcatenatedWith |  -endpoint- newpath + ' > ' + destpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:17:40:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' > ' + destpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 |  >  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 |  >  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 |  >  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:25:40:27 |  >  | stringConcatenatedWith | 'cat ' + newpath -endpoint- destpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:30:40:37 | destpath | stringConcatenatedWith | 'cat ' + newpath + ' > ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:40:42:40:49 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | exceptional return of execSyn ... File}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:1:42:47 | execSyn ... File}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:10:42:46 | `cat ${ ... tFile}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:11:42:14 | cat  | stringConcatenatedWith |  -endpoint- files.join() + ' > ' + outFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:21 | files | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:26 | files.join | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | exceptional return of files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:17:42:31 | files.join(' ') | stringConcatenatedWith | 'cat ' -endpoint- ' > ' + outFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:23:42:26 | join | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | CalleeFlexibleAccessPath | files.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:28:42:30 | ' ' | receiverName | files |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 |  >  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 |  >  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 |  >  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:33:42:35 |  >  | stringConcatenatedWith | 'cat ' + files.join() -endpoint- outFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:42:38:42:44 | outFile | stringConcatenatedWith | 'cat ' + files.join() + ' > ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | exceptional return of execSyn ... ' ')}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:1:44:34 | execSyn ... ' ')}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:10:44:33 | `cat ${ ... (' ')}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:11:44:14 | cat  | stringConcatenatedWith |  -endpoint- files.join() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:21 | files | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:26 | files.join | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | exceptional return of files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:17:44:31 | files.join(' ') | stringConcatenatedWith | 'cat ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:23:44:26 | join | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | CalleeFlexibleAccessPath | files.join |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:44:28:44:30 | ' ' | receiverName | files |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ...  name") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ...  name") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exceptional return of exec("c ...  name") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ...  name") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ...  name") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:1:46:37 | exec("c ...  name") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:46:6:46:36 | "cat /p ... p name" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | exceptional return of execSyn ... tool}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:1:48:41 | execSyn ... tool}`) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:10:48:40 | `cat ${ ... rtool}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:11:48:14 | cat  | stringConcatenatedWith |  -endpoint- newpath + ' \| ' + othertool |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:17:48:23 | newpath | stringConcatenatedWith | 'cat ' -endpoint- ' \| ' + othertool |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 |  \|  | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 |  \|  | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 |  \|  | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:25:48:27 |  \|  | stringConcatenatedWith | 'cat ' + newpath -endpoint- othertool |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:48:30:48:38 | othertool | stringConcatenatedWith | 'cat ' + newpath + ' \| ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:50:0 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | 'arguments' object of function cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | exceptional return of function cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | functio ... OT OK\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:1:52:1 | return of function cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:10:50:12 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:50:14:50:17 | file | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:16 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | exceptional return of execSyn ... + file) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:31 | execSyn ... + file) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:40 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:9:51:42 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:23 | 'cat ' | stringConcatenatedWith |  -endpoint- file |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:18:51:30 | 'cat ' + file | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:27:51:30 | file | stringConcatenatedWith | 'cat ' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | contextSurroundingFunctionParameters | (file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | enclosingFunctionBody | file execSync cat  file toString |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | enclosingFunctionName | cat |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:51:33:51:40 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ...  + "'") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ...  + "'") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | exceptional return of execSyn ...  + "'") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ...  + "'") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ...  + "'") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:1:54:39 | execSyn ...  + "'") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:22 | "sh -c 'cat " | stringConcatenatedWith |  -endpoint- newpath + ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c  ... newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c  ... newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:32 | "sh -c  ... newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:10:54:38 | "sh -c  ... h + "'" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:26:54:32 | newpath | stringConcatenatedWith | 'sh -c 'cat ' -endpoint- ''' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:54:36:54:38 | "'" | stringConcatenatedWith | 'sh -c 'cat ' + newpath -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:12 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFil ... xecFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:5:56:37 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:28 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:16:56:37 | child_p ... xecFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:56:30:56:37 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:16 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFil ... ileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:5:57:45 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:32 | child_process | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:20:57:45 | child_p ... ileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:57:34:57:45 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:59:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | exceptional return of execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:1:62:2 | execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:10:59:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:22:59:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:24:59:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:59:36 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:37:62:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:46:59:50 | error | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:53:59:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:59:61:59:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:9 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:3:61:21 | exceptional return of console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:11:61:13 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:61:15:61:20 | stdout | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:64:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | exceptional return of execFil ... r); \\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:1:66:2 | execFil ... r); \\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:10:64:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:22:64:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:24:64:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:64:36 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | functio ... rr); \\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:37:66:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:46:64:50 | error | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:53:64:58 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:64:61:64:66 | stderr | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:9 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | console.log(stderr) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:3:65:21 | exceptional return of console.log(stderr) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:11:65:13 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | enclosingFunctionBody | error stdout stderr console log stderr |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:65:15:65:20 | stderr | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:69:8 | execFile | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | exceptional return of execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:1:72:2 | execFil ... ut);\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:10:69:19 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:22:69:34 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:24:69:32 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:38:69:55 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:46 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:39:69:54 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:49:69:54 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:69:57 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | CalleeFlexibleAccessPath | execFile |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | InputArgumentIndex | 3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | functio ... out);\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:58:72:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:67:69:71 | error | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:74:69:79 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:69:82:69:87 | stderr | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:9 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:13 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:3:71:21 | exceptional return of console.log(stdout) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:11:71:13 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | contextSurroundingFunctionParameters | (error, stdout, stderr) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | enclosingFunctionBody | error stdout stderr console log stdout |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | enclosingFunctionName | execFile#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:71:15:71:20 | stdout | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | exceptional return of execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:1:74:60 | execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:14:74:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:26:74:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:28:74:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:42:74:59 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:50 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:43:74:58 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:74:53:74:58 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | exceptional return of execFil ... xml' ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:1:76:39 | execFil ... xml' ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:14:76:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:26:76:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:76:28:76:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:8 | opts | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts =  ... 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts =  ... 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:5:78:29 | opts =  ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:12:78:29 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:20 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:13:78:28 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:78:23:78:28 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ...   opts) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ...   opts) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | exceptional return of execFil ...   opts) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ...   opts) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ...   opts) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:1:79:46 | execFil ...   opts) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:14:79:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:26:79:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:28:79:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:79:42:79:45 | opts | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:52 | anOptsF ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsF ... 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:5:81:73 | anOptsFileNameThatIsTooLongToBePrintedByToString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:56:81:73 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:64 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:57:81:72 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:81:67:81:72 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | exceptional return of execFil ... String) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:1:82:90 | execFil ... String) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:14:82:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:26:82:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:28:82:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:82:42:82:89 | anOptsF ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | exceptional return of execFil ... ring'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:1:84:115 | execFil ... ring'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:14:84:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:26:84:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:28:84:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:42:84:114 | {encodi ... tring'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:50 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:43:84:113 | encodin ... String' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:84:53:84:113 | 'someEn ... String' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | exceptional return of execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:1:86:75 | execFil ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:14:86:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:26:86:53 | [ "foo/ ... "bar" ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:33 | "foo/" | stringConcatenatedWith |  -endpoint- newPath + 'bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:43 | "foo/" + newPath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:28:86:51 | "foo/"  ... + "bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:37:86:43 | newPath | stringConcatenatedWith | 'foo/' -endpoint- 'bar' |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:47:86:51 | "bar" | stringConcatenatedWith | 'foo/' + newPath -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:57:86:74 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:65 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:58:86:73 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:86:68:86:73 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:8 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ...  + foo) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ...  + foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | exceptional return of execSyn ...  + foo) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ...  + foo) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ...  + foo) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:35 | execSyn ...  + foo) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:44 | execSyn ... oString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | exceptional return of execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:1:88:46 | execSyn ... tring() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:28 | 'cat /proc/cpuinfo' | stringConcatenatedWith |  -endpoint- foo |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:10:88:34 | 'cat /p ... ' + foo | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:32:88:34 | foo | stringConcatenatedWith | 'cat /proc/cpuinfo' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:88:37:88:44 | toString | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | exceptional return of execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:1:90:50 | execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:14:90:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:26:90:49 | [ `foo/ ... ath}` ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:28:90:47 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:29:90:36 | foo/bar/ | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:90:39:90:45 | newpath | stringConcatenatedWith | 'foo/bar/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | exceptional return of execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:1:92:46 | execFil ... th}` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:14:92:19 | 'node' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:22:92:45 | [ `foo/ ... ath}` ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:24:92:43 | `foo/bar/${newpath}` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:25:92:32 | foo/bar/ | stringConcatenatedWith |  -endpoint- newpath |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:92:35:92:41 | newpath | stringConcatenatedWith | 'foo/bar/' -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:1:94:43 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:6:94:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:20 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:21:94:42 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:31:94:33 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:94:36:94:38 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:1:96:53 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:6:96:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:21:96:52 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:22:96:24 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:27:96:29 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:42 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:46 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:36:96:51 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:44:96:46 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:96:48:96:50 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exceptional return of exec("c ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:1:98:55 | exec("c ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:6:98:18 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | (err, o ... th(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:21:98:54 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:22:98:24 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:27:98:29 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:49 | doSomethingWith | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:35:98:54 | exceptional return of doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | CalleeFlexibleAccessPath | doSomethingWith |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:98:51:98:53 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | exceptional return of execFil ... ptions) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:1:100:56 | execFil ... ptions) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:14:100:23 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:26:100:38 | [ 'pom.xml' ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:28:100:36 | 'pom.xml' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:100:42:100:55 | unknownOptions | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exceptional return of exec("n ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:1:102:56 | exec("n ... h(out)) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:6:102:19 | "node foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | (err, o ... th(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:22:102:55 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:23:102:25 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:28:102:30 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:50 | doSomethingWith | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:36:102:55 | exceptional return of doSomethingWith(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | CalleeFlexibleAccessPath | doSomethingWith |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | enclosingFunctionBody | err out doSomethingWith out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:102:52:102:54 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:12 | execFileSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | exceptional return of execFil ... cat` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:1:104:31 | execFil ... cat` ]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:14:104:19 | 'node' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | CalleeFlexibleAccessPath | execFileSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:22:104:30 | [ `cat` ] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:24:104:28 | `cat` | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:104:25:104:27 | cat | stringConcatenatedWith |  -endpoint-  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:1:106:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:6:106:19 | "cat foo/bar&" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:21 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:22:106:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:32:106:34 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:106:37:106:39 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:1:107:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:6:107:19 | "cat foo/bar," | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:21 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:22:107:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:32:107:34 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:107:37:107:39 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:1:108:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:6:108:19 | "cat foo/bar$" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:21 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:22:108:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:32:108:34 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:108:37:108:39 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exceptional return of exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:1:109:44 | exec("c ... ut) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:6:109:19 | "cat foo/bar`" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:21 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | functio ... out) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:22:109:43 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:32:109:34 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | enclosingFunctionBody | err out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:109:37:109:39 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:5 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | exceptional return of spawn(' ... it'] }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:1:111:51 | spawn(' ... it'] }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:7:111:11 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:14:111:50 | { stdio ... rit'] } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:20 | stdio | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:16:111:48 | stdio:  ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | InputAccessPathFromCallee | 1.stdio |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | assignedToPropName | stdio |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:23:111:48 | ['pipe' ... herit'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:24:111:29 | 'pipe' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:32:111:36 | stdin | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:111:39:111:47 | 'inherit' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:2 | (functi ... ());\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | (functi ... );\\n})() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:1:119:4 | exceptional return of (functi ... );\\n})() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:113:1 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | functio ... d());\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:113:2:119:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:11 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:9:114:38 | cat = s ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:19 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | exceptional return of spawn(' ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:15:114:38 | spawn(' ... ename]) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:21:114:25 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:28:114:37 | [filename] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:114:29:114:36 | filename | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:5 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:12 | cat.stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:115:15 | cat.stdout.on | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n  }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n  }) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n  }) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | cat.std ... );\\n  }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n  }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n  }) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:3:117:4 | exceptional return of cat.std ... );\\n  }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:7:115:12 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:14:115:15 | on | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | CalleeFlexibleAccessPath | cat.stdout.on |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:17:115:22 | 'data' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | CalleeFlexibleAccessPath | cat.stdout.on |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | (data)  ... a);\\n  } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:25:117:3 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:115:26:115:29 | data | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:7 | res | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:13 | res.write | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | exceptional return of res.write(data) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:5:116:19 | res.write(data) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:9:116:13 | write | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | CalleeFlexibleAccessPath | res.write |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:116:15:116:18 | data | receiverName | res |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:5 | cat | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:12 | cat.stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:15 | cat.stdout.on | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | cat.std ... .end()) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:3:118:39 | exceptional return of cat.std ... .end()) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:7:118:12 | stdout | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:14:118:15 | on | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | CalleeFlexibleAccessPath | cat.stdout.on |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:17:118:21 | 'end' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | CalleeFlexibleAccessPath | cat.stdout.on |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | () => res.end() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:24:118:38 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:32 | res | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:36 | res.end | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | exceptional return of res.end() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:30:118:38 | res.end() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | enclosingFunctionBody | cat spawn cat filename cat stdout on data data res write data cat stdout on end res end |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:118:34:118:36 | end | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:8 | dead | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead =  ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead =  ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:5:121:64 | dead =  ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:15 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:12:121:64 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:17:121:29 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:32:121:63 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:33:121:35 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:38:121:40 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:53 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:57 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:47:121:62 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:55:121:57 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:121:59:121:61 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:11 | notDead | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:5:123:67 | notDead ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:18 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:15:123:67 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:20:123:32 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:35:123:66 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:36:123:38 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:41:123:43 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:56 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:60 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:50:123:65 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:58:123:60 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:123:62:123:64 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:7 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:11 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | console.log(notDead) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:1:124:20 | exceptional return of console.log(notDead) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:9:124:11 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:124:13:124:19 | notDead | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:2 | (functi ... ess.\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | (functi ... s.\\n})() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:1:134:4 | exceptional return of (functi ... s.\\n})() | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:126:1 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | functio ... cess.\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:126:2:134:1 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:10 | dead | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead =  ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead =  ... (out)}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead =  ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead =  ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:7:127:66 | dead =  ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:17 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:14:127:66 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:19:127:31 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:34:127:65 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:35:127:37 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:40:127:42 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:55 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:59 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:49:127:64 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:57:127:59 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:127:61:127:63 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:129:10 | someCall | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n  ) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n  ) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n  ) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | exceptional return of someCal ... ss.\\n  ) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n  ) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n  ) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n  ) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n  ) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:129:3:131:3 | someCal ... ss.\\n  ) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:5 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | CalleeFlexibleAccessPath | someCall |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:2:130:54 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:7:130:19 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:22:130:53 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:23:130:25 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:28:130:30 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:43 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:47 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:37:130:52 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:45:130:47 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:130:49:130:51 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:13 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exceptional return of exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:10:133:62 | exec("c ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | contextSurroundingFunctionParameters | () |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:15:133:27 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:30:133:61 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:31:133:33 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:36:133:38 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:51 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:55 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:45:133:60 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:53:133:55 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | contextSurroundingFunctionParameters | ()\n(err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | enclosingFunctionBody | dead exec cat foo/bar err out console log out someCall exec cat foo/bar err out console log out exec cat foo/bar err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | enclosingFunctionName |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:133:57:133:59 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:136:13 | stdout2 | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:7:138:2 | stdout2 ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:136:24 | execSync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | exceptional return of execSyn ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:17:138:2 | execSyn ... tf8'\\n}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:26:136:48 | 'cat /e ... q.conf' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:136:51:138:1 | { // NO ... utf8'\\n} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:10 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:3:137:18 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | CalleeFlexibleAccessPath | execSync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:137:13:137:18 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:4 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ...  s) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ...  s) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exceptional return of exec('/ ...  s) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ...  s) {}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ...  s) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:1:140:36 | exec('/ ...  s) {}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:6:140:15 | '/bin/cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:17 | this | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | CalleeFlexibleAccessPath | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | contextSurroundingFunctionParameters | (e, s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | function (e, s) {} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:18:140:35 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | contextSurroundingFunctionParameters | (e, s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:28:140:28 | e | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | contextSurroundingFunctionParameters | (e, s) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | enclosingFunctionBody | e s |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | enclosingFunctionName | exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:140:31:140:31 | s | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:5 | spawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | exceptional return of spawn("cat") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:1:142:12 | spawn("cat") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | CalleeFlexibleAccessPath | spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | calleeImports | child_process |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:142:7:142:11 | "cat" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:11 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:5:145:32 | shelljs ... elljs") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:21 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | exceptional return of require("shelljs") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:15:145:32 | require("shelljs") | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:145:23:145:31 | "shelljs" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | exceptional return of shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:1:146:61 | shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:9:146:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:14:146:26 | "cat foo/bar" | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | (err, o ... g(out)} | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:29:146:60 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:30:146:32 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:35:146:37 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:50 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:54 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:44:146:59 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:52:146:54 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:146:56:146:58 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | exceptional return of shelljs ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:1:147:47 | shelljs ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:9:147:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:14:147:26 | "cat foo/bar" | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:29:147:46 | {encoding: 'utf8'} | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:30:147:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:147:40:147:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:7 | shelljs | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:12 | shelljs.exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | exceptional return of shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:1:148:81 | shelljs ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:9:148:12 | exec | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:14:148:26 | "cat foo/bar" | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:29:148:46 | {encoding: 'utf8'} | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:30:148:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:40:148:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | CalleeFlexibleAccessPath | shelljs.exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | calleeImports | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | (err, o ... g(out)} | receiverName | shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:49:148:80 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:50:148:52 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:55:148:57 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:70 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:74 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:64:148:79 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:72:148:74 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | enclosingFunctionName | shelljs.exec#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:148:76:148:78 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:10 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn  ... spawn') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn  ... spawn') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:5:150:35 | cspawn  ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:20 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | exceptional return of require ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:14:150:35 | require ... spawn') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:150:22:150:34 | 'cross-spawn' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:1:151:48 | exceptional return of cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:8:151:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:15:151:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:16:151:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:28:151:47 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:30:151:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:151:40:151:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:1:152:82 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:8:152:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:15:152:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:16:152:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:28:152:47 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:37 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:30:152:45 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:40:152:45 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | InputArgumentIndex | 3 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:50:152:81 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:51:152:53 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:56:152:58 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:71 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:75 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:65:152:80 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:73:152:75 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:152:77:152:79 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:1:153:60 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:8:153:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:15:153:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:16:153:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:28:153:59 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:29:153:31 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:34:153:36 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:49 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:53 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:43:153:58 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:51:153:53 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:153:55:153:57 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | cspawn( ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:1:154:26 | exceptional return of cspawn( ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:8:154:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:15:154:25 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:154:16:154:24 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:1:155:47 | exceptional return of cspawn( ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:8:155:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:15:155:46 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:16:155:18 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:21:155:23 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:36 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:40 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:30:155:45 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:38:155:40 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | enclosingFunctionName | cspawn#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:155:42:155:44 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:6 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:1:156:35 | exceptional return of cspawn( ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:8:156:12 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:15:156:34 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:24 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:17:156:32 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | CalleeFlexibleAccessPath | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:156:27:156:32 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:12 | myResult | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:5:158:46 | myResul ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:21 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:26 | cspawn.sync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | cspawn. ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:16:158:46 | exceptional return of cspawn. ... /bar']) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:23:158:26 | sync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:28:158:32 | 'cat' | receiverName | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:35:158:45 | ['foo/bar'] | receiverName | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:158:36:158:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:12 | myResult | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:5:159:68 | myResul ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:21 | cspawn | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:26 | cspawn.sync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | cspawn. ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:16:159:68 | exceptional return of cspawn. ... tf8' }) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:23:159:26 | sync | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:28:159:32 | 'cat' | receiverName | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:35:159:45 | ['foo/bar'] | receiverName | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:36:159:44 | 'foo/bar' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:48:159:67 | { encoding: 'utf8' } | receiverName | cspawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:57 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:50:159:65 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | CalleeFlexibleAccessPath | cspawn.sync |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | InputAccessPathFromCallee | 2.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | calleeImports | cross-spawn |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:159:60:159:65 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:11 | execmod | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:5:161:29 | execmod ... 'exec') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:21 | require | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | exceptional return of require('exec') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:15:161:29 | require('exec') | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | CalleeFlexibleAccessPath | require |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | calleeImports |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:161:23:161:28 | 'exec' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | exceptional return of execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:1:162:56 | execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:9:162:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:24:162:55 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:25:162:27 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:30:162:32 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:45 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:49 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:39:162:54 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:47:162:49 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:162:51:162:53 | out | receiverName | console |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | exceptional return of execmod ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:1:163:42 | execmod ... utf8'}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:9:163:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:24:163:41 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:32 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:25:163:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:163:35:163:40 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:7 | execmod | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | exceptional return of execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:1:164:76 | execmod ... (out)}) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:9:164:21 | "cat foo/bar" | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:24:164:41 | {encoding: 'utf8'} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:32 | encoding | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:25:164:40 | encoding: 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | InputAccessPathFromCallee | 1.encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | InputArgumentIndex | 1 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | assignedToPropName | encoding |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:35:164:40 | 'utf8' | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | 'arguments' object of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | CalleeFlexibleAccessPath | execmod |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | InputArgumentIndex | 2 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | calleeImports | exec |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | (err, o ... g(out)} | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | exceptional return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:44:164:75 | return of anonymous function | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:45:164:47 | err | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:50:164:52 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:65 | console | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:69 | console.log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | contextSurroundingFunctionParameters |  |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:59:164:74 | exceptional return of console.log(out) | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:67:164:69 | log | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | CalleeFlexibleAccessPath | console.log |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | InputArgumentIndex | 0 |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | contextFunctionInterfaces | cat(file) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | contextSurroundingFunctionParameters | (err, out) |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | enclosingFunctionBody | err out console log out |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | enclosingFunctionName | execmod#functionalargument |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | fileImports | child_process cross-spawn exec express fs shelljs |
| autogenerated/ShellCommandInjectionFromEnvironment/UselessUseOfCat/uselesscat.js:164:71:164:73 | out | receiverName | console |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:0 | this | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:1 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import  ... m 'fs'; | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import  ... m 'fs'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:1:1:34 | import  ... m 'fs'; | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:10:1:21 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:1:30:1:33 | 'fs' | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import  ... 'http'; | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import  ... 'http'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:1:2:36 | import  ... 'http'; | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:10:2:21 | createServer | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:2:30:2:35 | 'http' | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import  ...  'url'; | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import  ...  'url'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:1:3:28 | import  ...  'url'; | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:10:3:14 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:3:23:3:27 | 'url' | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import  ... 'path'; | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import  ... 'path'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:1:4:28 | import  ... 'path'; | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:10:4:13 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:4:22:4:27 | 'path' | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:6:10 | server | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server  ... )));\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server  ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:5:11:2 | server  ... )));\\n}) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:6:25 | createServer | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | createS ... )));\\n}) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:14:11:2 | exceptional return of createS ... )));\\n}) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:6:26 | this | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | 'arguments' object of anonymous function | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | exceptional return of anonymous function | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | CalleeFlexibleAccessPath | createServer |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | functio ... h)));\\n} | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:27:11:1 | return of anonymous function | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:36:6:38 | req | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:6:41:6:43 | res | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:10 | path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path =  ... ry.path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path =  ... ry.path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:7:7:44 | path =  ... ry.path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:18 | parse | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | exceptional return of parse(req.url, true) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:22 | req | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | CalleeFlexibleAccessPath | parse |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:20:7:26 | req.url | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:24:7:26 | url | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | CalleeFlexibleAccessPath | parse |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:29:7:32 | true | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:35:7:39 | query | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:7:41:7:44 | path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:5 | res | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:11 | res.write | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | exceptional return of res.wri ... path))) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:3:10:47 | res.wri ... path))) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:7:10:11 | write | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:24 | readFileSync | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ...  path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ...  path)) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ...  path)) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | exceptional return of readFil ...  path)) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:13:10:46 | readFil ...  path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:29 | join | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | exceptional return of join("public", path) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | CalleeFlexibleAccessPath | readFileSync |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:26:10:45 | join("public", path) | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | CalleeFlexibleAccessPath | join |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:31:10:38 | "public" | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | CalleeFlexibleAccessPath | join |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | enclosingFunctionBody | req res path parse req url true query path res write readFileSync join public path |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | enclosingFunctionName | createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath-es6.js:10:41:10:44 | path | fileImports | fs http path url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:0 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:1:1:1 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:6 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:5:1:22 | fs = require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:16 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | exceptional return of require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:10:1:22 | require('fs') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:1:18:1:21 | 'fs' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:8 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:5:2:26 | http =  ... 'http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:18 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | exceptional return of require('http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:12:2:26 | require('http') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:2:20:2:25 | 'http' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:7 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:5:3:24 | url = require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:17 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | exceptional return of require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:11:3:24 | require('url') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:3:19:3:23 | 'url' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:12 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitiz ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:5:4:43 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:22 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:16:4:43 | require ... ename') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:4:24:4:42 | 'sanitize-filename' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:14 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathMod ... 'path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:5:5:32 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:24 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | exceptional return of require('path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:18:5:32 | require('path') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:5:26:5:31 | 'path' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:5:8:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server  ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server  ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:5:61:2 | server  ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:14:8:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | exceptional return of http.cr ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:14:61:2 | http.cr ... )));\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:19:8:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:8:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | functio ... h)));\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:32:61:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:41:8:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:8:46:8:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:7:9:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:14:9:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:18:9:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:24:9:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:28:9:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:33:9:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:39:9:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:9:45:9:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:3:12:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:7:12:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:13:12:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:16:12:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:12:29:12:32 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ...  path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ...  path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | exceptional return of res.wri ...  path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ...  path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ...  path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:3:15:50 | res.wri ...  path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:7:15:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | exceptional return of fs.read ... + path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:13:15:49 | fs.read ... + path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:16:15:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:41 | "/home/user/" | stringConcatenatedWith |  -endpoint- path |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:29:15:48 | "/home/user/" + path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:15:45:15:48 | path | stringConcatenatedWith | '/home/user/' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:21 | path.startsWith | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | exceptional return of path.st ... user/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:7:17:36 | path.st ... user/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:12:17:21 | startsWith | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:17:23:17:35 | "/home/user/" | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:7:18:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:11:18:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:17:18:37 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:20:18:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:18:33:18:36 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | exceptional return of path.in ... ecret") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:28 | path.in ... ecret") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:7:20:34 | path.in ... ) == -1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:12:20:18 | indexOf | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | CalleeFlexibleAccessPath | path.indexOf |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:20:20:27 | "secret" | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:33:20:34 | -1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:20:34:20:34 | 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:7:21:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:11:21:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:17:21:37 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:20:21:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:21:33:21:36 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:8 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:19 | fs.existsSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | exceptional return of fs.existsSync(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:7:23:25 | fs.existsSync(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:10:23:19 | existsSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | CalleeFlexibleAccessPath | fs.existsSync |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:23:21:23:24 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:9 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:15 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:7:24:38 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:11:24:15 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:18 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:31 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:17:24:37 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:20:24:31 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:24:33:24:36 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:26:7:26:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:26:16:26:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:5:27:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:9:27:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:15:27:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:18:27:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:27:31:27:34 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:3:29:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:7:29:46 | path == ... ar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:16:29:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:29:29:46 | path === 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:29:38:29:46 | 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:5 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:5:30:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:9:30:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:15:30:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:18:30:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:30:31:30:34 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:3:32:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:24 | path === 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:46 | path == ... ar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:7:32:71 | path == ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:16:32:24 | 'foo.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:29:32:46 | path === 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:38:32:46 | 'bar.txt' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:69 | someOpaqueCondition | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | exceptional return of someOpa ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:32:51:32:71 | someOpa ... ition() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:5 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:5:33:36 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:9:33:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:15:33:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:18:33:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:33:31:33:34 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:6 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path =  ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path =  ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path =  ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path =  ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:3:35:23 | path =  ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:17 | sanitize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | exceptional return of sanitize(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:35:10:35:23 | sanitize(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:3:36:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:7:36:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:13:36:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:16:36:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:36:29:36:32 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:6 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:3:38:44 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:12 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:18 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:33 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:39 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:10:38:44 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:14:38:18 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:22 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:20:38:26 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:24:38:26 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:29:38:32 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:35:38:39 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:38:41:38:44 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:3:40:55 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:7:40:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:13:40:54 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:16:40:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:47 | pathModule.basename | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:29:40:53 | pathMod ... e(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:40:40:47 | basename | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | CalleeFlexibleAccessPath | pathModule.basename |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:40:49:40:52 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:3:42:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:7:42:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:13:42:53 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:16:42:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:46 | pathModule.dirname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:29:42:52 | pathMod ... e(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:40:42:46 | dirname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | CalleeFlexibleAccessPath | pathModule.dirname |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:42:48:42:51 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:3:44:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:7:44:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:13:44:53 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:16:44:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:46 | pathModule.extname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:29:44:52 | pathMod ... e(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:40:44:46 | extname | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | CalleeFlexibleAccessPath | pathModule.extname |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:44:48:44:51 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:3:46:51 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:7:46:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:13:46:50 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:16:46:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:43 | pathModule.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | exceptional return of pathMod ... n(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:29:46:49 | pathMod ... n(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:40:46:43 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:46:45:46:48 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | exceptional return of res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:3:48:60 | res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:7:48:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | exceptional return of fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:13:48:59 | fs.read ... th, z)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:16:48:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:43 | pathModule.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | exceptional return of pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:29:48:58 | pathMod ... ath, z) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:40:48:43 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:45:48:45 | x | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:48:48:48 | y | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:51:48:54 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | InputArgumentIndex | 3 |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:48:57:48:57 | z | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:3:50:56 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:7:50:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:13:50:55 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:16:50:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:48 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:29:50:54 | pathMod ... e(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:40:50:48 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:50:50:50:53 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:3:52:58 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:7:52:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | exceptional return of fs.read ...  path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:13:52:57 | fs.read ...  path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:16:52:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:47 | pathModule.relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | exceptional return of pathMod ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:29:52:56 | pathMod ... , path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:40:52:47 | relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:49:52:49 | x | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:52:52:52:55 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | exceptional return of res.wri ... h, x))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:3:54:58 | res.wri ... h, x))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:7:54:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | exceptional return of fs.read ... th, x)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:13:54:57 | fs.read ... th, x)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:16:54:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:47 | pathModule.relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | exceptional return of pathMod ... ath, x) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:29:54:56 | pathMod ... ath, x) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:40:54:47 | relative | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:49:54:52 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:54:55:54:55 | x | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:3:56:54 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:7:56:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:13:56:53 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:16:56:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:46 | pathModule.resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:29:56:52 | pathMod ... e(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:40:56:46 | resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:56:48:56:51 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | exceptional return of res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:3:58:63 | res.wri ... h, z))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:7:58:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | exceptional return of fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:13:58:62 | fs.read ... th, z)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:16:58:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:46 | pathModule.resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | exceptional return of pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:29:58:61 | pathMod ... ath, z) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:40:58:46 | resolve | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:48:58:48 | x | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:51:58:51 | y | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:54:58:57 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | InputArgumentIndex | 3 |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:58:60:58:60 | z | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:3:60:63 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:7:60:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:13:60:62 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:16:60:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:55 | pathMod ... cedPath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | exceptional return of pathMod ... h(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:29:60:61 | pathMod ... h(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:40:60:55 | toNamespacedPath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | CalleeFlexibleAccessPath | pathModule.toNamespacedPath |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path res write fs readFileSync /home/user/ path path startsWith /home/user/ res write fs readFileSync path path indexOf secret 1 res write fs readFileSync path fs existsSync path res write fs readFileSync path path foo.txt res write fs readFileSync path path foo.txt path bar.txt res write fs readFileSync path path foo.txt path bar.txt someOpaqueCondition res write fs readFileSync path path sanitize path res write fs readFileSync path path url parse req url true query path res write fs readFileSync pathModule basename path res write fs readFileSync pathModule dirname path res write fs readFileSync pathModule extname path res write fs readFileSync pathModule join path res write fs readFileSync pathModule join x y path z res write fs readFileSync pathModule normalize path res write fs readFileSync pathModule relative x path res write fs readFileSync pathModule relative path x res write fs readFileSync pathModule resolve path res write fs readFileSync pathModule resolve x y path z res write fs readFileSync pathModule toNamespacedPath path |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:60:57:60:60 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:7 | angular | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:14 | angular.module | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | angular ... p', []) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:63:27 | exceptional return of angular ... p', []) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:64:14 | angular ... rective | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n    }) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | angular ... \\n    }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:68:6 | exceptional return of angular ... \\n    }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:69:14 | angular ... rective | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n    }) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | angular ... \\n    }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:1:73:6 | exceptional return of angular ... \\n    }) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:9:63:14 | module | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | CalleeFlexibleAccessPath | angular.module |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:16:63:22 | 'myApp' | receiverName | angular |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | CalleeFlexibleAccessPath | angular.module |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:63:25:63:26 | [] | receiverName | angular |
| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:6:64:14 | directive | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | CalleeFlexibleAccessPath | angular.module().directive |
| autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:16:64:27 | 'myCustomer' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:64:30:64:29 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n    } | CalleeFlexibleAccessPath | angular.module().directive |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n    } | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | functio ... }\\n    } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:64:30:68:5 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n      ...       } | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n      ...       } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n      ...       } | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n      ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:65:16:67:9 | {\\n      ...       } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:23 | templateUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:66:13:66:31 | templateUrl: "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | assignedToPropName | templateUrl |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | enclosingFunctionBody | templateUrl SAFE |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:66:26:66:31 | "SAFE" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:6:69:14 | directive | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | CalleeFlexibleAccessPath | angular.module().directive().directive |
| autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:16:69:27 | 'myCustomer' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:69:30:69:29 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n    } | CalleeFlexibleAccessPath | angular.module().directive().directive |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n    } | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | functio ... }\\n    } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:69:30:73:5 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n      ...       } | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n      ...       } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n      ...       } | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n      ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:70:16:72:9 | {\\n      ...       } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:23 | templateUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:13:71:45 | templat ... nsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:31 | Cookie | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:35 | Cookie.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | assignedToPropName | templateUrl |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | Cookie.get("unsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:26:71:45 | exceptional return of Cookie.get("unsafe") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:33:71:35 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | CalleeFlexibleAccessPath | Cookie.get |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | enclosingFunctionBody | templateUrl Cookie get unsafe |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | enclosingFunctionName | directive#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:71:37:71:44 | "unsafe" | receiverName | Cookie |
| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:5:75:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server  ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:5:80:2 | server  ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:14:75:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:14:80:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:19:75:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:75:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:32:80:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:41:75:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:75:46:75:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:5:77:78 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:9:77:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:15:77:77 | fs.read ... .query) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:18:77:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | exceptional return of require ... ngify") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:55 | require ... ngify") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:61 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:70 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:31:77:76 | require ... ).query | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:39:77:54 | "querystringify" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:57:77:61 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:65 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | CalleeFlexibleAccessPath | import(!).parse |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | calleeImports | querystringify |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:63:77:69 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:67:77:69 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:77:72:77:76 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:5:78:76 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:9:78:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:15:78:75 | fs.read ... .query) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:18:78:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | exceptional return of require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:53 | require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:59 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:68 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:31:78:74 | require ... ).query | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:39:78:52 | "query-string" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:55:78:59 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:63 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | CalleeFlexibleAccessPath | import(!).parse |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | calleeImports | query-string |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:61:78:67 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:65:78:67 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:78:70:78:74 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | exceptional return of res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:5:79:75 | res.wri ... query)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:9:79:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | exceptional return of fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:15:79:74 | fs.read ... .query) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:18:79:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:37 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | exceptional return of require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:52 | require ... tring") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:58 | require ... ).parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | exceptional return of require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:67 | require ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:31:79:73 | require ... ).query | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:39:79:51 | "querystring" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:54:79:58 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:62 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | CalleeFlexibleAccessPath | import(!).parse |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | calleeImports | querystring |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:60:79:66 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:64:79:66 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | enclosingFunctionBody | req res res write fs readFileSync require querystringify parse req url query res write fs readFileSync require query-string parse req url query res write fs readFileSync require querystring parse req url query |
| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:79:69:79:73 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:2 | (functi ... d);\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | (functi ... ;\\n\\n})() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:1:93:4 | exceptional return of (functi ... ;\\n\\n})() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:82:1 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | functio ... ed);\\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:82:2:93:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:15 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:9:84:36 | express ... press') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:25 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | exceptional return of require('express') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:19:84:36 | require('express') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:84:27:84:35 | 'express' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:19 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | applica ... press() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:9:85:31 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:29 | express | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | exceptional return of express() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:85:23:85:31 | express() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:19 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_l ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:9:87:61 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | 'arguments' object of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | (req, r ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | exceptional return of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:23:87:61 | return of function views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:24:87:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:29:87:31 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:39 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:46 | res.render | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | exceptional return of res.ren ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:37:87:61 | res.ren ... ams[0]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:41:87:46 | render | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:50 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:57 | req.params | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | CalleeFlexibleAccessPath | res.render |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:48:87:60 | req.params[0] | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:52:87:57 | params | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | contextSurroundingFunctionParameters | ()\n(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:87:59:87:59 | 0 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:15 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:19 | application.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | applica ... _local) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:5:88:44 | exceptional return of applica ... _local) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:17:88:19 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | CalleeFlexibleAccessPath | application.get |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | calleeImports | express |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:21:88:30 | '/views/*' | receiverName | application |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | CalleeFlexibleAccessPath | application.get |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | calleeImports | express |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:88:33:88:43 | views_local | receiverName | application |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:22 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_i ... views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:9:90:43 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:32 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | exceptional return of require("./views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:26:90:43 | require("./views") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:90:34:90:42 | "./views" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:15 | application | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:19 | application.get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | applica ... ported) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:5:91:47 | exceptional return of applica ... ported) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:17:91:19 | get | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | CalleeFlexibleAccessPath | application.get |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | calleeImports | express |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:21:91:30 | '/views/*' | receiverName | application |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | CalleeFlexibleAccessPath | application.get |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | calleeImports | express |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | enclosingFunctionBody | express require express application express views_local req res res render req 0 params 0 application get /views/* views_local views_imported require ./views application get /views/* views_imported |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | enclosingFunctionName |  |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:91:33:91:46 | views_imported | receiverName | application |
| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:1:95:16 | addEventListener | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | addEven ... ta);\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:1:97:2 | exceptional return of addEven ... ta);\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | CalleeFlexibleAccessPath | addEventListener |
| autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:18:95:26 | 'message' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | CalleeFlexibleAccessPath | addEventListener |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | (ev) => ... ata);\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:95:29:97:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:95:30:95:31 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:8 | Cookie | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:12 | Cookie.set | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | Cookie. ... v.data) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:3:96:31 | exceptional return of Cookie. ... v.data) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:10:96:12 | set | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | CalleeFlexibleAccessPath | Cookie.set |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:14:96:21 | "unsafe" | receiverName | Cookie |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:25 | ev | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | CalleeFlexibleAccessPath | Cookie.set |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:96:24:96:30 | ev.data | receiverName | Cookie |
| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | contextSurroundingFunctionParameters | (ev) |
| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | enclosingFunctionBody | ev Cookie set unsafe ev data |
| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:96:27:96:30 | data | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:5:99:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server  ...  );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server  ...  );\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:5:109:2 | server  ...  );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:14:99:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ...  );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ...  );\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | exceptional return of http.cr ...  );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ...  );\\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ...  );\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:14:109:2 | http.cr ...  );\\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:19:99:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:99:32 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | functio ...   );\\n\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:32:109:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:41:99:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:99:46:99:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:9 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:6:100:47 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:15 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:21 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:36 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:42 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:13:100:47 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:17:100:21 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:25 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:23:100:29 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:27:100:29 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:32:100:35 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:38:100:42 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:100:44:100:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:4 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:10 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | exceptional return of res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:2:102:50 | res.wri ... path))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:6:102:10 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:13 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:26 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | exceptional return of fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:12:102:49 | fs.read ... (path)) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:15:102:26 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:29 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:42 | fs.realpathSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | exceptional return of fs.real ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:28:102:48 | fs.real ... c(path) | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:31:102:42 | realpathSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | CalleeFlexibleAccessPath | fs.realpathSync |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:102:44:102:47 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:3 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:2:103:12 | fs.realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ...       ) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ...       ) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ...       ) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ...       ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | exceptional return of fs.real ...       ) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ...       ) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ...       ) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ...       ) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ...       ) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:2:107:17 | fs.real ...       ) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:5:103:12 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | CalleeFlexibleAccessPath | fs.realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:103:14:103:17 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:104:17 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | CalleeFlexibleAccessPath | fs.realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | functio ...       } | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:18:106:18 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:27:104:29 | err | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:104:32:104:39 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:21 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:27 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | exceptional return of res.wri ... lpath)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:19:105:54 | res.wri ... lpath)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:23:105:27 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:30 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:43 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | exceptional return of fs.read ... alpath) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:29:105:53 | fs.read ... alpath) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:32:105:43 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | contextSurroundingFunctionParameters | (req, res)\n(err, realpath) |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync fs realpathSync path fs realpath path err realpath res write fs readFileSync realpath |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:105:45:105:52 | realpath | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:5:111:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server  ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server  ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:5:120:2 | server  ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:14:111:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | exceptional return of http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:14:120:2 | http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:19:111:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:111:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | functio ... bove.\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:32:120:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:41:111:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:111:46:111:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:7:112:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:14:112:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:18:112:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:24:112:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:28:112:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:33:112:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:39:112:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:112:45:112:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:114:7:114:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path =  ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path =  ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path =  ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path =  ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:5:115:51 | path =  ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:12:115:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:17:115:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:25:115:46 | /[\\]\\[* ... \\?\\/]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:115:49:115:50 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path =  ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path =  ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path =  ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path =  ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:5:116:36 | path =  ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:12:116:36 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:17:116:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:25:116:31 | /\\.\\./g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:116:34:116:35 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:3:119:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:7:119:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:13:119:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:16:119:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:119:29:119:32 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:5:122:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server  ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server  ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:5:133:2 | server  ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:14:122:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | exceptional return of http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:14:133:2 | http.cr ... ove.\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:19:122:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:122:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | functio ... bove.\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:32:133:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:41:122:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:122:46:122:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:7:123:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:14:123:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:18:123:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:24:123:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:28:123:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:33:123:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:39:123:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:123:45:123:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:125:7:125:11 | !path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:125:8:125:11 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:7 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path =  ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path =  ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path =  ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path =  ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:4:128:50 | path =  ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:14 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:22 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:11:128:50 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:16:128:22 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:24:128:45 | /[\\]\\[* ... \\?\\/]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:128:48:128:49 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:8 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path =  ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path =  ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path =  ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path =  ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:5:129:36 | path =  ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:15 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:23 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:12:129:36 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:17:129:23 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:25:129:31 | /\\.\\./g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:129:34:129:35 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:3 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | exceptional return of res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:3:132:34 | res.wri ... (path)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:7:132:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:13:132:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:16:132:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | enclosingFunctionBody | req res path url parse req url true query path path path path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  path path replace /\\.\\./g  res write fs readFileSync path |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:132:29:132:32 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:5:135:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server  ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:5:139:2 | server  ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:14:135:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:14:139:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:19:135:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:135:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:32:139:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:41:135:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:135:46:135:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:9 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:6:136:47 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:15 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:21 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:36 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:42 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:13:136:47 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:17:136:21 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:25 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:23:136:29 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:27:136:29 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:32:136:35 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:38:136:42 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:136:44:136:47 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:8 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | exceptional return of require('send') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:16 | require('send') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | exceptional return of require ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:2:138:27 | require ... , path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:10:138:15 | 'send' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | calleeImports | send |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:18:138:20 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | calleeImports | send |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | enclosingFunctionBody | req res path url parse req url true query path require send req path |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:138:23:138:26 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:5:141:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server  ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server  ... OK \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:5:163:2 | server  ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:14:141:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | exceptional return of http.cr ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:14:163:2 | http.cr ... OK \\n\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:19:141:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:141:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | functio ...  OK \\n\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:32:163:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:41:141:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:141:46:141:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:7:142:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:14:142:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:18:142:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:24:142:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:28:142:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:33:142:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:39:142:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:142:45:142:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | exceptional return of fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:3:144:23 | fs.read ... c(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:6:144:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:144:19:144:22 | path | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:11 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:7:146:29 | split = ... it("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:18 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:24 | path.split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | exceptional return of path.split("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:15:146:29 | path.split("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:20:146:24 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:146:26:146:28 | "/" | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:3:148:34 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:6:148:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:28 | split.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | exceptional return of split.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:19:148:33 | split.join("/") | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:25:148:28 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | CalleeFlexibleAccessPath | split.join |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:148:30:148:32 | "/" | receiverName | split |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | exceptional return of fs.read ... h - 1]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:3:150:51 | fs.read ... h - 1]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:6:150:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:24 | prefix | stringConcatenatedWith |  -endpoint- split.? |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:19:150:50 | prefix  ... th - 1] | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:32 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:28:150:50 | split[s ... th - 1] | stringConcatenatedWith | prefix -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:38 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:45 | split.length | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:34:150:49 | split.length - 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:40:150:45 | length | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:150:49:150:49 | 1 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | exceptional return of fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:3:152:27 | fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:6:152:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:152:19:152:26 | split[x] | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:152:25:152:25 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | exceptional return of fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:3:153:36 | fs.read ... lit[x]) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:6:153:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:24 | prefix | stringConcatenatedWith |  -endpoint- split.? |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:19:153:35 | prefix + split[x] | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:32 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:153:28:153:35 | split[x] | stringConcatenatedWith | prefix -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:153:34:153:34 | x | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:15 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatt ... (split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:7:155:38 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:24 | prefix | stringConcatenatedWith |  -endpoint- split |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:31 | prefix.concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | exceptional return of prefix.concat(split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:19:155:38 | prefix.concat(split) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:26:155:31 | concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | CalleeFlexibleAccessPath | prefix.concat |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | receiverName | prefix |
| autogenerated/TaintedPath/TaintedPath.js:155:33:155:37 | split | stringConcatenatedWith | prefix -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:3:156:38 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:6:156:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:27 | concatted | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:32 | concatted.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | concatted.join("/") | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:19:156:37 | exceptional return of concatted.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:29:156:32 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | CalleeFlexibleAccessPath | concatted.join |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:156:34:156:36 | "/" | receiverName | concatted |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:16 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatt ... prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:7:158:39 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:24 | split | stringConcatenatedWith |  -endpoint- prefix |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:31 | split.concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | exceptional return of split.concat(prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:20:158:39 | split.concat(prefix) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:26:158:31 | concat | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | CalleeFlexibleAccessPath | split.concat |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | receiverName | split |
| autogenerated/TaintedPath/TaintedPath.js:158:33:158:38 | prefix | stringConcatenatedWith | split -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | exceptional return of fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:3:159:39 | fs.read ... n("/")) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:6:159:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:28 | concatted2 | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:33 | concatted2.join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | concatted2.join("/") | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:19:159:38 | exceptional return of concatted2.join("/") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:30:159:33 | join | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | CalleeFlexibleAccessPath | concatted2.join |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:159:35:159:37 | "/" | receiverName | concatted2 |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:4 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:17 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | exceptional return of fs.read ... .pop()) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:3:161:30 | fs.read ... .pop()) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:6:161:17 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:23 | split | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:27 | split.pop | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | exceptional return of split.pop() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:161:19:161:29 | split.pop() | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path split path split / fs readFileSync split join / fs readFileSync prefix split split length 1 fs readFileSync split x fs readFileSync prefix split x concatted prefix concat split fs readFileSync concatted join / concatted2 split concat prefix fs readFileSync concatted2 join / fs readFileSync split pop |
| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:161:25:161:27 | pop | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:5:165:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server  ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server  ... ute)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:5:196:2 | server  ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:14:165:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | exceptional return of http.cr ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:14:196:2 | http.cr ... ute)\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:19:165:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:165:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | functio ... lute)\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:32:196:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:41:165:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:165:46:165:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:7:166:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:14:166:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:18:166:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:24:166:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:28:166:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:33:166:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:39:166:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:166:45:166:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:3:169:70 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:7:169:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:13:169:69 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:16:169:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:29:169:68 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:34:169:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:42:169:63 | /[\\]\\[* ... \\?\\/]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:169:66:169:67 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:3:170:57 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:7:170:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:13:170:56 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:16:170:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:29:170:55 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:34:170:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:42:170:50 | /[abcd]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:170:53:170:54 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:3:171:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:7:171:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:13:171:54 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:16:171:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:29:171:53 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:34:171:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:42:171:48 | /[./]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:171:51:171:52 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:3:172:66 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:7:172:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:13:172:65 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:16:172:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:29:172:64 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:34:172:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:42:172:59 | /[foobar/foobar]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:172:62:172:63 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:3:173:53 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:7:173:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:13:173:52 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:16:173:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:29:173:51 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:34:173:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:42:173:46 | /\\//g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:173:49:173:50 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:3:174:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:7:174:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:13:174:55 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:16:174:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:29:174:54 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:34:174:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:42:174:49 | /\\.\|\\//g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:174:52:174:53 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:3:176:54 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:7:176:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:13:176:53 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:16:176:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:29:176:52 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:34:176:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:42:176:47 | /[.]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:176:50:176:51 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:3:177:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:7:177:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:13:177:54 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:16:177:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:29:177:53 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:34:177:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:42:177:48 | /[..]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:177:51:177:52 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:3:178:53 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:7:178:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:13:178:52 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:16:178:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:29:178:51 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:34:178:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:42:178:46 | /\\./g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:178:49:178:50 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:3:179:59 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:7:179:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:13:179:58 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:16:179:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:32 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:40 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:29:179:57 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:34:179:40 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:42:179:52 | /\\.\\.\|BLA/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:179:55:179:56 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:7:181:34 | !pathMo ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:17 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:28 | pathMod ... bsolute | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:8:181:34 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:181:19:181:28 | isAbsolute | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:5:182:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:9:182:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:15:182:55 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:18:182:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:42 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:31:182:54 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:36:182:42 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:44:182:49 | /[.]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:182:52:182:53 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:6 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:12 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:4:183:56 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:8:183:12 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:15 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:28 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:14:183:55 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:17:183:28 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:33 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:41 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:30:183:54 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:35:183:41 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:43:183:49 | /[..]/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:183:52:183:53 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:7 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:13 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:5:184:55 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:9:184:13 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:16 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:29 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:15:184:54 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:18:184:29 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:42 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:31:184:53 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:36:184:42 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:44:184:48 | /\\./g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:184:51:184:52 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:6 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:12 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:4:185:60 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:8:185:12 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:15 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:28 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | exceptional return of fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:14:185:59 | fs.read ... g, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:17:185:28 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:33 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:41 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | exceptional return of path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:30:185:58 | path.re ... /g, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:35:185:41 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:43:185:53 | /\\.\\.\|BLA/g | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:185:56:185:57 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:3:189:97 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:7:189:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:13:189:96 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:16:189:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:36 | "prefix" | stringConcatenatedWith |  -endpoint- pathModule.normalize().replace() |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:29:189:95 | "prefix ... +/, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:40:189:95 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:51:189:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:61:189:64 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:67:189:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:75:189:90 | /^(\\.\\.[\\/\\\\])+/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:189:93:189:94 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:3:190:96 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:7:190:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:13:190:95 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:16:190:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:36 | "prefix" | stringConcatenatedWith |  -endpoint- pathModule.normalize().replace() |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:29:190:94 | "prefix ... +/, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:40:190:94 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:51:190:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:61:190:64 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:67:190:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:75:190:89 | /(\\.\\.[\\/\\\\])+/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:190:92:190:93 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:3:191:92 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:7:191:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:13:191:91 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:16:191:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:36 | "prefix" | stringConcatenatedWith |  -endpoint- pathModule.normalize().replace() |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:29:191:90 | "prefix ... +/, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:40:191:90 | pathMod ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:51:191:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:61:191:64 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:67:191:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:75:191:85 | /(\\.\\.\\/)+/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:191:88:191:89 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:3:192:92 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:7:192:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:13:192:91 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:16:192:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:36 | "prefix" | stringConcatenatedWith |  -endpoint- pathModule.normalize().replace() |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:29:192:90 | "prefix ... */, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:49 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:59 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:65 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:73 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | exceptional return of pathMod ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:40:192:90 | pathMod ... */, '') | stringConcatenatedWith | 'prefix' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:51:192:59 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:61:192:64 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:67:192:73 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:75:192:85 | /(\\.\\.\\/)*/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:192:88:192:89 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:3:194:75 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:7:194:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:13:194:74 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:16:194:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:36 | "prefix" | stringConcatenatedWith |  -endpoint- path.replace() |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:29:194:73 | "prefix ... +/, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:43 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:51 | path.replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | exceptional return of path.re ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:40:194:73 | path.re ... +/, '') | stringConcatenatedWith | 'prefix' -endpoint-  |
| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:45:194:51 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:53:194:68 | /^(\\.\\.[\\/\\\\])+/ | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:194:71:194:72 | '' | receiverName | path |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | exceptional return of res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:3:195:86 | res.wri ... , ''))) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:7:195:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | exceptional return of fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:13:195:85 | fs.read ... /, '')) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:16:195:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:38 | pathModule | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:48 | pathModule.normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | exceptional return of pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:54 | pathMod ... e(path) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:62 | pathMod ... replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | exceptional return of pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:29:195:84 | pathMod ... +/, '') | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:40:195:48 | normalize | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:50:195:53 | path | receiverName | pathModule |
| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:56:195:62 | replace | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:64:195:79 | /^(\\.\\.[\\/\\\\])+/ | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | calleeImports | path |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  res write fs readFileSync path replace /[abcd]/g  res write fs readFileSync path replace /[./]/g  res write fs readFileSync path replace /[foobar/foobar]/g  res write fs readFileSync path replace /\\//g  res write fs readFileSync path replace /\\.\|\\//g  res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  pathModule isAbsolute path res write fs readFileSync path replace /[.]/g  res write fs readFileSync path replace /[..]/g  res write fs readFileSync path replace /\\./g  res write fs readFileSync path replace /\\.\\.\|BLA/g  res write fs readFileSync prefix pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.[\\/\\\\])+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)+/  res write fs readFileSync prefix pathModule normalize path replace /(\\.\\.\\/)*/  res write fs readFileSync prefix path replace /^(\\.\\.[\\/\\\\])+/  res write fs readFileSync pathModule normalize path replace /^(\\.\\.[\\/\\\\])+/  |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:195:82:195:83 | '' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import  ... e-url'; | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import  ... e-url'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:1:198:41 | import  ... e-url'; | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:198:8:198:19 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:198:26:198:40 | 'normalize-url' | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:5:200:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server  ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:5:207:2 | server  ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:14:200:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:14:207:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:19:200:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:200:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:32:207:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:41:200:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:200:46:200:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:10 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:9:202:26 | qs = require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:20 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | exceptional return of require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:14:202:26 | require("qs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:202:22:202:25 | "qs" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:3:203:51 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:7:203:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | exceptional return of fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:13:203:50 | fs.read ... l).foo) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:16:203:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:30 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:36 | qs.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | exceptional return of qs.parse(req.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:45 | qs.parse(req.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:29:203:49 | qs.pars ... rl).foo | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:32:203:36 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:40 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | CalleeFlexibleAccessPath | qs.parse |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | calleeImports | qs |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:38:203:44 | req.url | receiverName | qs |
| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:42:203:44 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:203:47:203:49 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:3:204:65 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:7:204:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | exceptional return of fs.read ... )).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:13:204:64 | fs.read ... )).foo) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:16:204:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:30 | qs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:36 | qs.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | exceptional return of qs.pars ... q.url)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:59 | qs.pars ... q.url)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:29:204:63 | qs.pars ... l)).foo | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:32:204:36 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:49 | normalizeUrl | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | exceptional return of normali ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | CalleeFlexibleAccessPath | qs.parse |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | calleeImports | qs |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:38:204:58 | normali ... eq.url) | receiverName | qs |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:53 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | CalleeFlexibleAccessPath | normalizeUrl |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | calleeImports | normalize-url |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:51:204:57 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:55:204:57 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:204:61:204:63 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:15 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:9:205:36 | parseqs ... rseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:25 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | exceptional return of require("parseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:19:205:36 | require("parseqs") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:205:27:205:35 | "parseqs" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:5 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:11 | res.write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | exceptional return of res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:3:206:57 | res.wri ... ).foo)) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:7:206:11 | write | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:14 | fs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:27 | fs.readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | exceptional return of fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:13:206:56 | fs.read ... l).foo) | receiverName | res |
| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:16:206:27 | readFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:35 | parseqs | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:42 | parseqs.decode | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | exceptional return of parseqs ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:51 | parseqs ... eq.url) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | calleeImports | fs |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:29:206:55 | parseqs ... rl).foo | receiverName | fs |
| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:37:206:42 | decode | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:46 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | CalleeFlexibleAccessPath | parseqs.decode |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | calleeImports | parseqs |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:44:206:50 | req.url | receiverName | parseqs |
| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:48:206:50 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | enclosingFunctionBody | req res qs require qs res write fs readFileSync qs parse req url foo res write fs readFileSync qs parse normalizeUrl req url foo parseqs require parseqs res write fs readFileSync parseqs decode req url foo |
| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:206:53:206:55 | foo | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:8 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:7:209:35 | cp = re ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:18 | require | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | exceptional return of require ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:12:209:35 | require ... ocess") | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | calleeImports |  |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:209:20:209:34 | "child_process" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:5:210:10 | server | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server  ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:5:215:2 | server  ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:17 | http | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:14:210:30 | http.createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:14:215:2 | http.cr ... T OK\\n}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:19:210:30 | createServer | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | this | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:210:31 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | 'arguments' object of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | exceptional return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:32:215:1 | return of anonymous function | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:41:210:43 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:210:46:210:48 | res | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:10 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path =  ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:7:211:48 | path =  ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:16 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:22 | url.parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | exceptional return of url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:37 | url.par ... , true) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:43 | url.par ... ).query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:14:211:48 | url.par ... ry.path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:18:211:22 | parse | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:26 | req | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:24:211:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:28:211:30 | url | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | calleeImports | url |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:33:211:36 | true | receiverName | url |
| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:39:211:43 | query | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:211:45:211:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:13 | cp.execSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ...  path}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:3:212:36 | exceptional return of cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:6:212:13 | execSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:15:212:22 | "foobar" | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:25:212:35 | {cwd: path} | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:28 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:26:212:34 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | CalleeFlexibleAccessPath | cp.execSync |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | InputAccessPathFromCallee | 1.cwd |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | assignedToPropName | cwd |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:212:31:212:34 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:17 | cp.execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ...  path}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:3:213:50 | exceptional return of cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:6:213:17 | execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:19:213:26 | "foobar" | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:29:213:36 | ["args"] | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:30:213:35 | "args" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:39:213:49 | {cwd: path} | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:42 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:40:213:48 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | InputAccessPathFromCallee | 2.cwd |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | assignedToPropName | cwd |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:213:45:213:48 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:4 | cp | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:17 | cp.execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ...  path}) | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ...  path}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ...  path}) | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:3:214:40 | exceptional return of cp.exec ...  path}) | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:6:214:17 | execFileSync | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:19:214:26 | "foobar" | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:29:214:39 | {cwd: path} | receiverName | cp |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:32 | cwd | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:30:214:38 | cwd: path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | CalleeFlexibleAccessPath | cp.execFileSync |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | InputAccessPathFromCallee | 1.cwd |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | assignedToPropName | cwd |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | calleeImports | child_process |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | contextFunctionInterfaces | views_local(req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | enclosingFunctionBody | req res path url parse req url true query path cp execSync foobar cwd path cp execFileSync foobar args cwd path cp execFileSync foobar cwd path |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/TaintedPath.js:214:35:214:38 | path | fileImports | ./views child_process express fs http normalize-url parseqs path qs query-string querystring querystringify sanitize-filename send url |
| autogenerated/TaintedPath/express.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:1:1:0 | this | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:1:1:1 | require | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:5:1:11 | express | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:5:1:32 | express ... press") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:15:1:21 | require | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:15:1:32 | exceptional return of require("express") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:15:1:32 | require("express") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | calleeImports |  |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:1:23:1:31 | "express" | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:3:2:12 | fileUpload | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpl ... pload") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:3:2:44 | fileUpload | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:16:2:22 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:16:2:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:16:2:22 | require | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:16:2:44 | exceptional return of require ... pload") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:16:2:44 | require ... pload") | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | calleeImports |  |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:2:24:2:43 | "express-fileupload" | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:5:4:7 | app | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:5:4:19 | app = express() | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:11:4:17 | express | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:11:4:19 | exceptional return of express() | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:4:11:4:19 | express() | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:1:5:3 | app | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:1:5:7 | app.use | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:1:5:21 | app.use ... load()) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:1:5:21 | exceptional return of app.use ... load()) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:5:5:7 | use | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:5:5:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:5:5:7 | use | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:9:5:18 | fileUpload | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:9:5:20 | exceptional return of fileUpload() | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | CalleeFlexibleAccessPath | app.use |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | calleeImports | express |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:5:9:5:20 | fileUpload() | receiverName | app |
| autogenerated/TaintedPath/express.js:7:1:7:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:1:7:3 | app | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:1:7:7 | app.get | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:1:9:2 | app.get ... ar);\\n}) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:1:9:2 | exceptional return of app.get ... ar);\\n}) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:5:7:7 | get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:5:7:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:5:7:7 | get | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | calleeImports | express |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:9:7:20 | "/some/path" | receiverName | app |
| autogenerated/TaintedPath/express.js:7:23:7:22 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:23:7:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:23:7:22 | this | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:23:7:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:23:7:22 | this | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:23:9:1 | 'arguments' object of anonymous function | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:23:9:1 | exceptional return of anonymous function | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | calleeImports | express |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:23:9:1 | functio ... bar);\\n} | receiverName | app |
| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:23:9:1 | return of anonymous function | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:33:7:35 | req | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:7:38:7:40 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:7:38:7:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:7:38:7:40 | res | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:7:38:7:40 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:7:38:7:40 | res | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:5 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:5 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:3:8:5 | req | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:5 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:5 | req | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:11 | req.files | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:15 | req.files.foo | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:18 | req.files.foo.mv | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:33 | exceptional return of req.fil ... ry.bar) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:3:8:33 | req.fil ... ry.bar) | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:7:8:11 | files | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:7:8:11 | files | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:7:8:11 | files | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:7:8:11 | files | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:7:8:11 | files | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:13:8:15 | foo | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:17:8:18 | mv | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:20:8:22 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:20:8:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:20:8:22 | req | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:20:8:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:20:8:22 | req | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:20:8:28 | req.query | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | CalleeFlexibleAccessPath | req.files.foo.mv |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:20:8:32 | req.query.bar | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:24:8:28 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:24:8:28 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:24:8:28 | query | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:24:8:28 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:24:8:28 | query | fileImports | express express-fileupload |
| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | enclosingFunctionBody | req res req files foo mv req query bar |
| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/express.js:8:30:8:32 | bar | fileImports | express express-fileupload |
| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:1:1:0 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:1:1:1 | require | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:7:1:13 | express | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:7:1:34 | express ... press') | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:17:1:23 | require | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | exceptional return of require('express') | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:17:1:34 | require('express') | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:1:25:1:33 | 'express' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:7:2:8 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:7:2:32 | hb = re ... ebars") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:12:2:18 | require | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | exceptional return of require ... ebars") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:12:2:32 | require ... ebars") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | calleeImports |  |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:2:20:2:31 | "handlebars" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:7:3:8 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:7:3:24 | fs = require("fs") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:12:3:18 | require | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | exceptional return of require("fs") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:12:3:24 | require("fs") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | calleeImports |  |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:3:20:3:23 | "fs" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:7:5:9 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:7:5:21 | app = express() | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:13:5:19 | express | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | exceptional return of express() | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:5:13:5:21 | express() | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:7:7:7:10 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:7:7:7:15 | data = {} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:7:14:7:15 | {} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:9:0 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | 'arguments' object of function init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | exceptional return of function init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | functio ... }}");\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:9:1:24:1 | return of function init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:9:10:9:13 | init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:5:10:6 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:5:10:21 | hb.registerHelper | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n    }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n    }) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | exceptional return of hb.regi ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n    }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n    }) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:5:12:6 | hb.regi ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:8:10:21 | registerHelper | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | CalleeFlexibleAccessPath | hb.registerHelper |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:23:10:31 | "catFile" | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:10:33 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | 'arguments' object of function catFile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | exceptional return of function catFile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | CalleeFlexibleAccessPath | hb.registerHelper |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | functio ... )\\n    } | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:34:12:5 | return of function catFile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:43:10:49 | catFile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:10:51:10:58 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:16:11:17 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:16:11:30 | fs.readFileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | exceptional return of fs.read ... lePath) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:16:11:40 | fs.read ... lePath) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:19:11:30 | readFileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | contextSurroundingFunctionParameters | ()\n(filePath) |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:11:32:11:39 | filePath | receiverName | fs |
| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:5:13:6 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:5:13:21 | hb.registerHelper | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n    }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n    }) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | exceptional return of hb.regi ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n    }) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n    }) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:5:19:6 | hb.regi ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:8:13:21 | registerHelper | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | CalleeFlexibleAccessPath | hb.registerHelper |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:23:13:38 | "prependToLines" | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:13:40 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:13:41 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | 'arguments' object of function prependToLines | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | exceptional return of function prependToLines | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | hb.registerHelper |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | functio ... ;\\n    } | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:41:19:5 | return of function prependToLines | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:50:13:63 | prependToLines | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:65:13:70 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:13:73:13:80 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:14:17 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n     ... ileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n     ... ileSync | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n     ... ileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n     ... ileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:15:23 | fs\\n     ... ileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n     ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n     ... lePath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n     ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n     ... lePath) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | exceptional return of fs\\n     ... lePath) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n     ... lePath) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n     ... lePath) | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n     ... lePath) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n     ... lePath) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:15:33 | fs\\n     ... lePath) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n     ...  .split | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n     ...  .split | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n     ...  .split | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n     ...  .split | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:16:16 | fs\\n     ...  .split | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n     ... t("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n     ... t("\\n") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n     ... t("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n     ... t("\\n") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | exceptional return of fs\\n     ... t("\\n") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n     ... t("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n     ... t("\\n") | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n     ... t("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n     ... t("\\n") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:16:22 | fs\\n     ... t("\\n") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n     ...    .map | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n     ...    .map | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n     ...    .map | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n     ...    .map | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:17:14 | fs\\n     ...    .map | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n     ... + line) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n     ... + line) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n     ... + line) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n     ... + line) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | exceptional return of fs\\n     ... + line) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n     ... + line) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n     ... + line) | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n     ... + line) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n     ... + line) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:17:39 | fs\\n     ... + line) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n     ...   .join | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n     ...   .join | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n     ...   .join | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n     ...   .join | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:18:15 | fs\\n     ...   .join | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n     ... n("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n     ... n("\\n") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n     ... n("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n     ... n("\\n") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | exceptional return of fs\\n     ... n("\\n") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n     ... n("\\n") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n     ... n("\\n") | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n     ... n("\\n") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n     ... n("\\n") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:14:16:18:21 | fs\\n     ... n("\\n") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:15:12:15:23 | readFileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:15:25:15:32 | filePath | receiverName | fs |
| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:16:12:16:16 | split | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | CalleeFlexibleAccessPath | fs.readFileSync().split |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:16:18:16:21 | "\\n" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:12:17:14 | map | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:16:17:15 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | CalleeFlexibleAccessPath | fs.readFileSync().split().map |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | (line)  ...  + line | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:16:17:38 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:17:17:20 | line | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:26:17:31 | prefix | stringConcatenatedWith |  -endpoint- line |
| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) |
| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:26:17:38 | prefix + line | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | contextSurroundingFunctionParameters | ()\n(prefix, filePath)\n(line) |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:17:35:17:38 | line | stringConcatenatedWith | prefix -endpoint-  |
| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:18:12:18:15 | join | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | CalleeFlexibleAccessPath | fs.readFileSync().split().map().join |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | contextSurroundingFunctionParameters | ()\n(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:18:17:18:20 | "\\n" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:5:20:8 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:5:20:27 | data.co ... eAccess | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:5:20:91 | data.co ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:10:20:27 | compiledFileAccess | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:31:20:32 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:31:20:40 | hb.compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | exceptional return of hb.comp ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | assignedToPropName | compiledFileAccess |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:31:20:91 | hb.comp ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:34:20:40 | compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | CalleeFlexibleAccessPath | hb.compile |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:20:42:20:90 | "conten ... path}}" | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:5:21:8 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:5:21:23 | data.compiledBenign | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:5:21:55 | data.co ... ame}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:10:21:23 | compiledBenign | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:27:21:28 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:27:21:36 | hb.compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | exceptional return of hb.comp ... ame}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | assignedToPropName | compiledBenign |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:27:21:55 | hb.comp ... ame}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:30:21:36 | compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | CalleeFlexibleAccessPath | hb.compile |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:21:38:21:54 | "hello, {{name}}" | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:5:22:8 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:5:22:24 | data.compiledUnknown | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:5:22:75 | data.co ... late")) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:10:22:24 | compiledUnknown | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:28:22:29 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:28:22:37 | hb.compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | exceptional return of hb.comp ... late")) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | assignedToPropName | compiledUnknown |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:28:22:75 | hb.comp ... late")) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:31:22:37 | compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:39:22:40 | fs | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:39:22:53 | fs.readFileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | exceptional return of fs.read ... plate") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | CalleeFlexibleAccessPath | hb.compile |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:39:22:74 | fs.read ... plate") | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:42:22:53 | readFileSync | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | calleeImports | fs |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:22:55:22:73 | "greeting.template" | receiverName | fs |
| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:5:23:8 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:5:23:22 | data.compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:5:23:111 | data.co ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:10:23:22 | compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:26:23:27 | hb | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:26:23:35 | hb.compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | exceptional return of hb.comp ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | assignedToPropName | compiledMixed |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:26:23:111 | hb.comp ... ath}}") | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:29:23:35 | compile | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | CalleeFlexibleAccessPath | hb.compile |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | calleeImports | handlebars |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | enclosingFunctionBody | hb registerHelper catFile catFile filePath fs readFileSync filePath hb registerHelper prependToLines prependToLines prefix filePath fs readFileSync filePath split \n map line prefix line join \n data compiledFileAccess hb compile contents of file {{path}} are: {{catFile path}} data compiledBenign hb compile hello, {{name}} data compiledUnknown hb compile fs readFileSync greeting.template data compiledMixed hb compile helpers may have several args, like here: {{prependToLines prefix path}} |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | enclosingFunctionName | init |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:23:37:23:110 | "helper ... path}}" | receiverName | hb |
| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:26:1:26:4 | init | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | exceptional return of init() | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:26:1:26:6 | init() | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:1:28:3 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:1:28:7 | app.get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | app.get ... ile)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:1:30:2 | exceptional return of app.get ... ile)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:5:28:7 | get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:9:28:21 | '/some/path1' | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:24:28:23 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | functio ... File)\\n} | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:24:30:1 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:34:28:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:28:39:28:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:5:29:7 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:5:29:12 | res.send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | exceptional return of res.sen ... ath })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:5:29:64 | res.sen ... ath })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:9:29:12 | send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:14:29:17 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:14:29:36 | data.co ... eAccess | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | CalleeFlexibleAccessPath | res.send |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | data.co ... path }) | receiverName | res |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:14:29:63 | exceptional return of data.co ... path }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:19:29:36 | compiledFileAccess | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | CalleeFlexibleAccessPath | data.compiledFileAccess |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:38:29:62 | { path: ... .path } | receiverName | data |
| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:40:29:43 | path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:40:29:60 | path: r ... ms.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:46:29:48 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:46:29:55 | req.params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | CalleeFlexibleAccessPath | data.compiledFileAccess |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | InputAccessPathFromCallee | 0.path |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | assignedToPropName | path |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:46:29:60 | req.params.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:50:29:55 | params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | enclosingFunctionBody | req res res send data compiledFileAccess path req params path |
| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:29:57:29:60 | path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:1:32:3 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:1:32:7 | app.get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | app.get ... ile)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:1:34:2 | exceptional return of app.get ... ile)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:5:32:7 | get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:9:32:21 | '/some/path2' | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:24:32:23 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | functio ... File)\\n} | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:24:34:1 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:34:32:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:32:39:32:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:5:33:7 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:5:33:12 | res.send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | exceptional return of res.sen ... ame })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:5:33:60 | res.sen ... ame })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:9:33:12 | send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:14:33:17 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:14:33:32 | data.compiledBenign | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | CalleeFlexibleAccessPath | res.send |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | data.co ... name }) | receiverName | res |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:14:33:59 | exceptional return of data.co ... name }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:19:33:32 | compiledBenign | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | CalleeFlexibleAccessPath | data.compiledBenign |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:34:33:58 | { name: ... .name } | receiverName | data |
| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:36:33:39 | name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:36:33:56 | name: r ... ms.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:42:33:44 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:42:33:51 | req.params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | CalleeFlexibleAccessPath | data.compiledBenign |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | InputAccessPathFromCallee | 0.name |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | assignedToPropName | name |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:42:33:56 | req.params.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:46:33:51 | params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | enclosingFunctionBody | req res res send data compiledBenign name req params name |
| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:33:53:33:56 | name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:1:36:3 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:1:36:7 | app.get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ...  ok)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ...  ok)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | app.get ...  ok)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ...  ok)\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ...  ok)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:1:38:2 | exceptional return of app.get ...  ok)\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:5:36:7 | get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:9:36:21 | '/some/path3' | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:24:36:23 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | functio ... s ok)\\n} | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:24:38:1 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:34:36:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:36:39:36:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:5:37:7 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:5:37:12 | res.send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | exceptional return of res.sen ... ame })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:5:37:61 | res.sen ... ame })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:9:37:12 | send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:14:37:17 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:14:37:33 | data.compiledUnknown | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | CalleeFlexibleAccessPath | res.send |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | data.co ... name }) | receiverName | res |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:14:37:60 | exceptional return of data.co ... name }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:19:37:33 | compiledUnknown | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | CalleeFlexibleAccessPath | data.compiledUnknown |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:35:37:59 | { name: ... .name } | receiverName | data |
| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:37:37:40 | name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:37:37:57 | name: r ... ms.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:43:37:45 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:43:37:52 | req.params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | CalleeFlexibleAccessPath | data.compiledUnknown |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | InputAccessPathFromCallee | 0.name |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | assignedToPropName | name |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:43:37:57 | req.params.name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:47:37:52 | params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | enclosingFunctionBody | req res res send data compiledUnknown name req params name |
| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:37:54:37:57 | name | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:1:40:3 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:1:40:7 | app.get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | app.get ... }));\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:1:45:2 | exceptional return of app.get ... }));\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:5:40:7 | get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:9:40:21 | '/some/path4' | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:24:40:23 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | functio ...  }));\\n} | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:24:45:1 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:34:40:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:40:39:40:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:5:41:7 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:5:41:12 | res.send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ...     })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ...     })) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ...     })) | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ...     })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | exceptional return of res.sen ...     })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ...     })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ...     })) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ...     })) | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ...     })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:5:44:7 | res.sen ...     })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:9:41:12 | send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:14:41:17 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:14:41:31 | data.compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | CalleeFlexibleAccessPath | res.send |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | data.co ... \\n    }) | receiverName | res |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n    }) | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:14:44:6 | exceptional return of data.co ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:19:41:31 | compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:41:33:44:5 | {\\n      ... )\\n    } | receiverName | data |
| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:42:9:42:14 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:42:9:42:22 | prefix: ">>> " | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | InputAccessPathFromCallee | 0.prefix |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | assignedToPropName | prefix |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:42:17:42:22 | ">>> " | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:9:43:12 | path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:9:43:29 | path: r ... ms.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:15:43:17 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:15:43:24 | req.params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | InputAccessPathFromCallee | 0.path |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | assignedToPropName | path |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:15:43:29 | req.params.path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:19:43:24 | params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | enclosingFunctionBody | req res res send data compiledMixed prefix >>>  path req params path |
| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:43:26:43:29 | path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:1:47:3 | app | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:1:47:7 | app.get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | app.get ... }));\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:1:52:2 | exceptional return of app.get ... }));\\n}) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:5:47:7 | get | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:9:47:21 | '/some/path5' | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:24:47:23 | this | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | 'arguments' object of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | exceptional return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | calleeImports | express |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | functio ...  }));\\n} | receiverName | app |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:24:52:1 | return of anonymous function | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:34:47:36 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:47:39:47:41 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:5:48:7 | res | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:5:48:12 | res.send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ...     })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ...     })) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ...     })) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ...     })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | exceptional return of res.sen ...     })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ...     })) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ...     })) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ...     })) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ...     })) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:5:51:7 | res.sen ...     })) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:9:48:12 | send | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:14:48:17 | data | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:14:48:31 | data.compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | CalleeFlexibleAccessPath | res.send |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | data.co ... \\n    }) | receiverName | res |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n    }) | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n    }) | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:14:51:6 | exceptional return of data.co ... \\n    }) | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:19:48:31 | compiledMixed | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:48:33:51:5 | {\\n      ... "\\n    } | receiverName | data |
| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:9:49:14 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:9:49:33 | prefix: ... .prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:17:49:19 | req | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:17:49:26 | req.params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | InputAccessPathFromCallee | 0.prefix |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | assignedToPropName | prefix |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:17:49:33 | req.params.prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:21:49:26 | params | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:49:28:49:33 | prefix | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:50:9:50:12 | path | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:50:9:50:31 | path: " ... -5.txt" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | CalleeFlexibleAccessPath | data.compiledMixed |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | InputAccessPathFromCallee | 0.path |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | assignedToPropName | path |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | contextFunctionInterfaces | catFile(filePath)\ninit()\nprependToLines(prefix, filePath) |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | enclosingFunctionBody | req res res send data compiledMixed prefix req params prefix path data/path-5.txt |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/handlebars.js:50:15:50:31 | "data/path-5.txt" | fileImports | express fs handlebars |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:0 | this | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | fs | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | module | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:1:1:1 | require | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:8 | fs | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:7:1:24 | fs = require('fs') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:18 | require | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | exceptional return of require('fs') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:12:1:24 | require('fs') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:1:20:1:23 | 'fs' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:17 | {promisify} | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:7:2:39 | {promis ... ebird') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:8:2:16 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:27 | require | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | exceptional return of require('bluebird') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:21:2:39 | require('bluebird') | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | calleeImports |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:2:29:2:38 | 'bluebird' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:4:13 | methods | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:7:9:1 | methods ... Sync'\\n] | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n  're ... Sync'\\n] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n  're ... Sync'\\n] | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:4:17:9:1 | [\\n  're ... Sync'\\n] | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:5:3:5:12 | 'readFile' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:6:3:6:13 | 'writeFile' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:7:3:7:16 | 'readFileSync' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:8:3:8:17 | 'writeFileSync' | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:6 | module | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:11:14 | module.exports | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:1:14:6 | module. ... \\n}, {}) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:8:11:14 | exports | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:24 | methods | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:11:31 | methods.reduce | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | exceptional return of methods ... \\n}, {}) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | assignedToPropName | exports |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:18:14:6 | methods ... \\n}, {}) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:26:11:31 | reduce | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | fs | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:11:32 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | 'arguments' object of anonymous function | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | CalleeFlexibleAccessPath | methods.reduce |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | (obj, m ...  obj;\\n} | receiverName | methods |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | exceptional return of anonymous function | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:33:14:1 | return of anonymous function | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:34:11:36 | obj | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:11:39:11:44 | method | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:5 | obj | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:13 | obj[method] | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:3:12:37 | obj[met ... ethod]) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:7:12:12 | method | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:25 | promisify | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | exceptional return of promisi ... ethod]) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:17:12:37 | promisi ... ethod]) | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:28 | fs | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | CalleeFlexibleAccessPath | promisify |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | calleeImports | bluebird |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:27:12:36 | fs[method] | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:12:30:12:35 | method | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | contextSurroundingFunctionParameters | (obj, method) |
| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | enclosingFunctionBody | obj method obj method promisify fs method obj |
| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | enclosingFunctionName | methods.reduce#functionalargument |
| autogenerated/TaintedPath/my-async-fs-module.js:13:10:13:12 | obj | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | CalleeFlexibleAccessPath | methods.reduce |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | fileImports | bluebird fs |
| autogenerated/TaintedPath/my-async-fs-module.js:14:4:14:5 | {} | receiverName | methods |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:0 | this | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | exports | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:1 | require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:7 | exports | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:1:15 | exports.require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:1:7:1 | exports ... );\\n\\t}\\n} | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:9:1:15 | require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:1:18 | this | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | 'arguments' object of anonymous function | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | exceptional return of anonymous function | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | assignedToPropName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | functio ... );\\n\\t}\\n} | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:19:7:1 | return of anonymous function | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:1:28:1:34 | special | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:2:6:2:12 | special | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:16 | require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | exceptional return of require("fs") | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:3:10:3:22 | require("fs") | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | calleeImports |  |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:3:18:3:21 | "fs" | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:16 | require | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | exceptional return of require ... al-fs") | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:5:10:5:31 | require ... al-fs") | fileImports | fs original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | calleeImports |  |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | contextFunctionInterfaces | require(special) |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | enclosingFunctionName | require |
| autogenerated/TaintedPath/my-fs-module.js:5:18:5:30 | "original-fs" | fileImports | fs original-fs |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:0 | this | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:1:1:1 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:5:1:22 | fs = require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:16 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | exceptional return of require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:10:1:22 | require('fs') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:1:18:1:21 | 'fs' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:11 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:5:2:32 | express ... press') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:21 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | exceptional return of require('express') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:15:2:32 | require('express') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:2:23:2:31 | 'express' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:7 | url | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:5:3:24 | url = require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:17 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | exceptional return of require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:11:3:24 | require('url') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:3:19:3:23 | 'url' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:12 | sanitize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:5:4:43 | sanitiz ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:22 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:16:4:43 | require ... ename') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:4:24:4:42 | 'sanitize-filename' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:14 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathMod ... 'path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:5:5:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:24 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | exceptional return of require('path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:18:5:32 | require('path') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:5:26:5:31 | 'path' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:7 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:5:8:19 | app = express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:17 | express | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | exceptional return of express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:8:11:8:19 | express() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:10:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:1:18:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:5:10:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:9:10:16 | '/basic' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:10:18 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:19:18:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:20:10:22 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:10:25:10:27 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path =  ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:7:11:27 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:14:11:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:18:11:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:11:24:11:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:3:13:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:6:13:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:13:19:13:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:3:14:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:6:14:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:22 | './' | stringConcatenatedWith |  -endpoint- path |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:19:14:29 | './' + path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:14:26:14:29 | path | stringConcatenatedWith | './' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | exceptional return of fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:3:15:39 | fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:6:15:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:22 | path | stringConcatenatedWith |  -endpoint- '/index.html' |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:19:15:38 | path + '/index.html' | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:15:26:15:38 | '/index.html' | stringConcatenatedWith | path -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:3:16:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:6:16:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:19:16:53 | pathMod ... .html') | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:30:16:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:35:16:38 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:16:41:16:52 | 'index.html' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | exceptional return of fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ...  path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:3:17:58 | fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:6:17:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:19:17:57 | pathMod ... , path) | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:30:17:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:35:17:50 | '/home/user/www' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:17:53:17:56 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:20:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:1:28:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:5:20:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:9:20:20 | '/normalize' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:20:22 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:23:28:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:24:20:26 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:20:29:20:31 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:7:21:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:14:21:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:25:21:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:35:21:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:39:21:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:21:45:21:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:3:23:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:6:23:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:23:19:23:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:3:24:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:6:24:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:22 | './' | stringConcatenatedWith |  -endpoint- path |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:19:24:29 | './' + path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:24:26:24:29 | path | stringConcatenatedWith | './' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | exceptional return of fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:3:25:39 | fs.read ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:6:25:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:22 | path | stringConcatenatedWith |  -endpoint- '/index.html' |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:19:25:38 | path + '/index.html' | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:25:26:25:38 | '/index.html' | stringConcatenatedWith | path -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:3:26:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:6:26:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:19:26:53 | pathMod ... .html') | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:30:26:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:35:26:38 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:26:41:26:52 | 'index.html' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | exceptional return of fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ...  path)) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:3:27:58 | fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:6:27:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:19:27:57 | pathMod ... , path) | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:30:27:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:35:27:50 | '/home/user/www' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | enclosingFunctionBody | req res path pathModule normalize req query path fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html fs readFileSync pathModule join path index.html fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:27:53:27:56 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:30:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:1:51:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:5:30:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:9:30:32 | '/norma ... solute' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:30:34 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:35:51:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:36:30:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:30:41:30:43 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:7:31:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:14:31:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:25:31:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:35:31:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:39:31:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:31:45:31:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:33:7:33:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:33:18:33:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:3:36:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:6:36:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:36:19:36:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:7:38:27 | !path.s ... th(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | exceptional return of path.startsWith(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:8:38:27 | path.startsWith(".") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:13:38:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:38:24:38:26 | "." | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:5:39:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:8:39:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:39:21:39:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:5:41:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:8:41:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:41:21:41:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:7:43:28 | !path.s ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:8:43:28 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:13:43:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:43:24:43:27 | ".." | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:5:44:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:8:44:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:44:21:44:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:7:46:29 | !path.s ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | exceptional return of path.st ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:8:46:29 | path.st ... ("../") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:13:46:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:46:24:46:28 | "../" | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:5:47:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:8:47:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:47:21:47:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:7:49:45 | !path.s ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | exceptional return of path.st ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:8:49:45 | path.st ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:13:49:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:27 | ".." | stringConcatenatedWith |  -endpoint- pathModule.sep |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:24:49:44 | ".." +  ... ule.sep | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:40 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:49:31:49:44 | pathModule.sep | stringConcatenatedWith | '..' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:49:42:49:44 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:5:50:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:8:50:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path fs readFileSync path path startsWith . fs readFileSync path fs readFileSync path path startsWith .. fs readFileSync path path startsWith ../ fs readFileSync path path startsWith .. pathModule sep fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:50:21:50:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:53:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:1:69:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:5:53:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:9:53:36 | '/norma ... DotDot' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:53:38 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:39:69:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:40:53:42 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:53:45:53:47 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:7:54:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:14:54:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:25:54:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:35:54:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:39:54:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:54:45:54:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:7:56:27 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:12:56:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:56:23:56:26 | ".." | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:3:59:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:6:59:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:59:19:59:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | exceptional return of fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:3:61:30 | fs.read ... + path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:6:61:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:22 | "./" | stringConcatenatedWith |  -endpoint- path |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:19:61:29 | "./" + path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:61:26:61:29 | path | stringConcatenatedWith | './' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | exceptional return of fs.read ... .html") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:3:63:39 | fs.read ... .html") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:6:63:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:22 | path | stringConcatenatedWith |  -endpoint- '/index.html' |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:19:63:38 | path + "/index.html" | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:63:26:63:38 | "/index.html" | stringConcatenatedWith | path -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:7:65:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:8:65:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:65:19:65:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:5:66:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:8:66:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:66:21:66:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:5:68:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:8:68:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync ./ path fs readFileSync path /index.html pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:68:21:68:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:71:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:1:79:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:5:71:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:9:71:28 | '/prepend-normalize' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:71:30 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:31:79:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:32:71:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:71:37:71:39 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:7:73:56 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:14:73:56 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:25:73:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:38 | './' | stringConcatenatedWith |  -endpoint- req.query.path |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:35:73:55 | './' +  ... ry.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:44 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:50 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:42:73:55 | req.query.path | stringConcatenatedWith | './' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:46:73:50 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:73:52:73:55 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:7:75:28 | !path.s ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | exceptional return of path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:8:75:28 | path.st ... h("..") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:13:75:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:75:24:75:27 | ".." | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:5:76:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:8:76:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:76:21:76:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:7 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:20 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:6:78:26 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:9:78:20 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | enclosingFunctionBody | req res path pathModule normalize ./ req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:78:22:78:25 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:81:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | app.get ... ../'\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:1:91:2 | exceptional return of app.get ... ../'\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:5:81:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:9:81:19 | '/absolute' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:81:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | (req, r ... '../'\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:22:91:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:23:81:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:81:28:81:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path =  ... ry.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:7:82:27 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:14:82:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:18:82:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:82:24:82:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:7:84:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:8:84:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:84:19:84:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:5 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:11 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:3:87:34 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:7:87:11 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:14 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:27 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:13:87:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:16:87:27 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:87:29:87:32 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:7:89:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:12:89:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:89:23:89:38 | '/home/user/www' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:7 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:13 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:5:90:36 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:9:90:13 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:16 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:29 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:15:90:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:18:90:29 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:90:31:90:34 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:93:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:1:103:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:5:93:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:9:93:30 | '/norma ... solute' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:93:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:33:103:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:34:93:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:93:39:93:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:7:94:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:14:94:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:25:94:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:35:94:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:39:94:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:94:45:94:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:7:96:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:8:96:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:96:19:96:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:5 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:11 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:3:99:34 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:7:99:11 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:14 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:27 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:13:99:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:16:99:27 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:99:29:99:32 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:7:101:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:12:101:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:101:23:101:38 | '/home/user/www' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:7 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:13 | res.write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | exceptional return of res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:5:102:36 | res.wri ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:9:102:13 | write | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:16 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:29 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:15:102:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:18:102:29 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path res write fs readFileSync path path startsWith /home/user/www res write fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:102:31:102:34 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:105:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:1:114:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:5:105:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:9:105:25 | '/combined-check' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:105:27 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:28:114:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:29:105:31 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:105:34:105:36 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:7:106:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:14:106:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:25:106:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:35:106:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:39:106:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:106:45:106:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | exceptional return of path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:7:109:39 | path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:12:109:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:109:23:109:38 | "/home/user/www" | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:5:110:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:8:110:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:110:21:110:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:13 | path[0] | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:21 | path[0] !== "/" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:7:112:40 | path[0] ... !== "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:12:112:12 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:19:112:21 | "/" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:29 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:32 | path[0] | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:26:112:40 | path[0] !== "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:31:112:31 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:112:38:112:40 | "." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:5:113:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:8:113:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path startsWith /home/user/www fs readFileSync path path 0 0 / path 0 0 . fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:113:21:113:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:116:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:1:127:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:5:116:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:9:116:19 | '/realpath' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:116:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:22:127:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:23:116:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:116:28:116:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path =  ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:7:117:44 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:15 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:28 | fs.realpathSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | exceptional return of fs.real ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:14:117:44 | fs.real ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:17:117:28 | realpathSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:38 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | CalleeFlexibleAccessPath | fs.realpathSync |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:30:117:43 | req.query.path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:34:117:38 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:117:40:117:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:3:119:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:6:119:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:119:19:119:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | exceptional return of fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:3:120:54 | fs.read ... html')) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:6:120:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | exceptional return of pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:19:120:53 | pathMod ... .html') | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:30:120:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:35:120:38 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:120:41:120:52 | 'index.html' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | exceptional return of path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:7:122:39 | path.st ... r/www") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:12:122:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:122:23:122:38 | "/home/user/www" | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:5:123:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:8:123:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:123:21:123:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | exceptional return of fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ...  path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:3:125:45 | fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:6:125:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:19:125:44 | pathMod ... , path) | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:30:125:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:35:125:37 | '.' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:125:40:125:43 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | exceptional return of fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ...  path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ...  path)) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ...  path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:3:126:58 | fs.read ...  path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:6:126:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:33 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:19:126:57 | pathMod ... , path) | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:30:126:33 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:35:126:50 | '/home/user/www' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | enclosingFunctionBody | req res path fs realpathSync req query path fs readFileSync path fs readFileSync pathModule join path index.html path startsWith /home/user/www fs readFileSync path fs readFileSync pathModule join . path fs readFileSync pathModule join /home/user/www path |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:126:53:126:56 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:129:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:1:136:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:5:129:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:9:129:26 | '/coerce-relative' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:129:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:29:136:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:30:129:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:129:35:129:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:7:130:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:28 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:14:130:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:25:130:28 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:30:130:32 | '.' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:35:130:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:39:130:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:130:45:130:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:7:132:28 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:8:132:28 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:13:132:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:132:24:132:27 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:5:133:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:8:133:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:133:21:133:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:5:135:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:8:135:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | enclosingFunctionBody | req res path pathModule join . req query path path startsWith .. fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:135:21:135:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:138:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:1:145:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:5:138:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:9:138:26 | '/coerce-absolute' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:138:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:29:145:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:30:138:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:138:35:138:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:7:139:62 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:28 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:14:139:62 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:25:139:28 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:30:139:45 | '/home/user/www' | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:50 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:56 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:48:139:61 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:52:139:56 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:139:58:139:61 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | exceptional return of path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:7:141:39 | path.st ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:12:141:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:141:23:141:38 | '/home/user/www' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:5:142:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:8:142:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:142:21:142:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:5:144:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:8:144:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | enclosingFunctionBody | req res path pathModule join /home/user/www req query path path startsWith /home/user/www fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:144:21:144:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:147:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:1:157:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:5:147:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:9:147:37 | '/conca ... zation' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:147:39 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:40:157:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:41:147:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:147:46:147:48 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path =  ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:7:148:58 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:19 | 'foo/' | stringConcatenatedWith |  -endpoint- pathModule.normalize() |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/'  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/'  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/'  ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/'  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:14:148:58 | 'foo/'  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:42 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:23:148:58 | pathMod ... y.path) | stringConcatenatedWith | 'foo/' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:34:148:42 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:46 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:52 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:44:148:57 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:48:148:52 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:148:54:148:57 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:7:150:28 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:22 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:8:150:28 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:13:150:22 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:150:24:150:27 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:5:151:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:8:151:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:151:21:151:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:5:153:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:8:153:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:153:21:153:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:7:155:26 | !path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:20 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:8:155:26 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:13:155:20 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | CalleeFlexibleAccessPath | path.includes |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:155:22:155:25 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:5:156:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:8:156:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | enclosingFunctionBody | req res path foo/ pathModule normalize req query path path startsWith .. fs readFileSync path fs readFileSync path path includes .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:156:21:156:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:159:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:1:171:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:5:159:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:9:159:19 | '/noDotDot' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:159:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:22:171:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:23:159:25 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:159:28:159:30 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:7:160:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:14:160:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:25:160:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:35:160:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:39:160:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:160:45:160:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:19 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:7:162:25 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:12:162:19 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | CalleeFlexibleAccessPath | path.includes |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:162:21:162:24 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:3:165:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:6:165:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:165:19:165:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:7:167:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:8:167:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:167:19:167:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:5:168:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:8:168:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:168:21:168:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:5:170:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:8:170:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path path includes .. fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:170:21:170:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:173:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:1:211:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:5:173:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:9:173:26 | '/join-regression' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:173:28 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:29:211:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:30:173:32 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:173:35:173:37 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path =  ... ry.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:7:174:27 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:14:174:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:18:174:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:174:24:174:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:7:179:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:18:179:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:37:179:40 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:179:50:179:53 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | exceptional return of path.startsWith('/') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:7:180:26 | path.startsWith('/') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:12:180:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:23:180:25 | '/' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:30:180:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:180:43:180:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | exceptional return of path.st ... h('/x') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:7:181:27 | path.st ... h('/x') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:12:181:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:23:181:26 | '/x' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:31:181:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:181:44:181:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:21 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | exceptional return of path.startsWith('.') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:7:182:26 | path.startsWith('.') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:12:182:21 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:23:182:25 | '.' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:30:182:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:182:43:182:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:3:184:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:6:184:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:184:19:184:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:186:7:186:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:186:18:186:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:5:187:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:8:187:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:187:21:187:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:5:189:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:8:189:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:189:21:189:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:19 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:7:191:25 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:12:191:19 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | CalleeFlexibleAccessPath | path.includes |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:191:21:191:24 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:5:192:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:8:192:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:192:21:192:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:5:194:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:8:194:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:194:21:194:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:26 | !path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:7:196:58 | !path.i ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:20 | path.includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | exceptional return of path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:8:196:26 | path.includes('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:13:196:20 | includes | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | CalleeFlexibleAccessPath | path.includes |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:22:196:25 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:31:196:58 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:41 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:52 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:32:196:58 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:196:43:196:52 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:5:197:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:8:197:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:197:21:197:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:5:199:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:8:199:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:199:21:199:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normali ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:7:201:49 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:33 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:43 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:24:201:49 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:35:201:43 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:201:45:201:48 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:31 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | exceptional return of normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:7:202:49 | normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:22:202:31 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | CalleeFlexibleAccessPath | normalizedPath.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:202:33:202:48 | '/home/user/www' | receiverName | normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:5:203:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:8:203:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:203:21:203:34 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:5:205:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:8:205:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:205:21:205:34 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:20 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:31 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | exceptional return of normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:49 | normali ... r/www') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:7:207:99 | normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:22:207:31 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | CalleeFlexibleAccessPath | normalizedPath.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:33:207:48 | '/home/user/www' | receiverName | normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:67 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:78 | normali ... rtsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | exceptional return of normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:54:207:99 | normali ... ublic') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:69:207:78 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | CalleeFlexibleAccessPath | normalizedPath.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:207:80:207:98 | '/home/user/public' | receiverName | normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:5:208:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:8:208:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:208:21:208:34 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:5:210:35 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:8:210:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | enclosingFunctionBody | req res path req query path pathModule isAbsolute path path path path startsWith / path path path startsWith /x path path path startsWith . path path fs readFileSync path pathModule isAbsolute path fs readFileSync path fs readFileSync path path includes .. fs readFileSync path fs readFileSync path path includes .. pathModule isAbsolute path fs readFileSync path fs readFileSync path normalizedPath pathModule normalize path normalizedPath startsWith /home/user/www fs readFileSync normalizedPath fs readFileSync normalizedPath normalizedPath startsWith /home/user/www normalizedPath startsWith /home/user/public fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:210:21:210:34 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:213:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | app.get ... ized\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:1:223:2 | exceptional return of app.get ... ized\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:5:213:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:9:213:37 | '/decod ... zation' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:213:39 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | (req, r ... lized\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:40:223:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:41:213:43 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:213:46:213:48 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:7:214:49 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:14:214:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:25:214:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:35:214:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:39:214:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:214:45:214:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:7:216:60 | !pathMo ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:8:216:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:19:216:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:39:216:60 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:54 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:40:216:60 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:45:216:54 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:216:56:216:59 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:5:217:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:8:217:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:217:21:217:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:6 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path =  ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path =  ... t(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path =  ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path =  ... t(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:3:219:33 | path =  ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:27 | decodeURIComponent | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | decodeU ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:10:219:33 | exceptional return of decodeU ... t(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:219:29:219:32 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:7:221:60 | !pathMo ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:8:221:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:19:221:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:39:221:60 | !path.s ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:43 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:54 | path.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | exceptional return of path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:40:221:60 | path.st ... h('..') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:45:221:54 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | CalleeFlexibleAccessPath | path.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:221:56:221:59 | '..' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:5:222:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:8:222:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path pathModule isAbsolute path path startsWith .. fs readFileSync path path decodeURIComponent path pathModule isAbsolute path path startsWith .. fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:222:21:222:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:225:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:1:233:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:5:225:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:9:225:18 | '/replace' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:225:20 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | (req, r ... K\\n  }\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:21:233:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:22:225:24 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:225:27:225:29 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path =  ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path =  ... g, ' ') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path =  ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path =  ... g, ' ') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:7:226:70 | path =  ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:49 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:57 | pathMod ... replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | exceptional return of pathMod ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:14:226:70 | pathMod ... g, ' ') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:25:226:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:35:226:48 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:39:226:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:45:226:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:51:226:57 | replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:59:226:64 | /%20/g | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | CalleeFlexibleAccessPath | pathModule.normalize().replace |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:226:67:226:69 | ' ' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:7:227:34 | !pathMo ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:17 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:28 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:8:227:34 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:227:19:227:28 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:5:228:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:8:228:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:228:21:228:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:8 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path =  ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path =  ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path =  ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path =  ... /g, '') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:5:230:36 | path =  ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:15 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:23 | path.replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | exceptional return of path.re ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:12:230:36 | path.re ... /g, '') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:17:230:23 | replace | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:25:230:31 | /\\.\\./g | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | CalleeFlexibleAccessPath | path.replace |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:230:34:230:35 | '' | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:5:231:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:8:231:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | enclosingFunctionBody | req res path pathModule normalize req query path replace /%20/g   pathModule isAbsolute path fs readFileSync path path path replace /\\.\\./g  fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:231:21:231:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:235:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | app.get ... rity\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:1:251:2 | exceptional return of app.get ... rity\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:5:235:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:9:235:23 | '/resolve-path' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:235:25 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | (req, r ... arity\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:26:251:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:27:235:29 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:235:32:235:34 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:7:236:47 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:31 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:14:236:47 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:25:236:31 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:41 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:33:236:46 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:37:236:41 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:236:43:236:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:3:238:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:6:238:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:238:19:238:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:10 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:7:240:24 | self = something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:22 | something | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | exceptional return of something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:240:14:240:24 | something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:20 | path.substring | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | exceptional return of path.su ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:40 | path.su ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:7:242:53 | path.su ... elf.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:12:242:20 | substring | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:22:242:22 | 0 | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:28 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:32 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:25:242:39 | self.dir.length | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:30:242:32 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:34:242:39 | length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:49 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:46:242:53 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:242:51:242:53 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:5:243:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:8:243:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:243:21:243:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:5:245:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:8:245:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:245:21:245:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:16 | path.slice | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | exceptional return of path.sl ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:36 | path.sl ... length) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:7:247:49 | path.sl ... elf.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:12:247:16 | slice | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | CalleeFlexibleAccessPath | path.slice |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:18:247:18 | 0 | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:28 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | CalleeFlexibleAccessPath | path.slice |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:21:247:35 | self.dir.length | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:26:247:28 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:30:247:35 | length | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:45 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:42:247:49 | self.dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:247:47:247:49 | dir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:5:248:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:8:248:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:248:21:248:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:5:250:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:8:250:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something path substring 0 self dir length self dir fs readFileSync path fs readFileSync path path slice 0 self dir length self dir fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:250:21:250:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:253:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:1:298:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:5:253:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:9:253:30 | '/relat ... tswith' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:253:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | (req, r ...  \\n  }\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:33:298:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:34:253:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:253:39:253:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:7:254:47 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:31 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:14:254:47 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:25:254:31 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:41 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:33:254:46 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:37:254:41 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:254:43:254:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:3:256:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:6:256:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:256:19:256:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:10 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:7:258:24 | self = something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:22 | something | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | exceptional return of something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:258:14:258:24 | something() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:14 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relativ ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:7:260:56 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:27 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:36 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:18:260:56 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:29:260:36 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:41 | self | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:38:260:49 | self.webroot | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:43:260:49 | webroot | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:260:52:260:55 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:13 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:24 | relative.startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | exceptional return of relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:47 | relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:6:261:67 | relativ ... == ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:15:261:24 | startsWith | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:29 | ".." | stringConcatenatedWith |  -endpoint- pathModule.sep |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | CalleeFlexibleAccessPath | relative.startsWith |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:26:261:46 | ".." +  ... ule.sep | receiverName | relative |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:42 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:33:261:46 | pathModule.sep | stringConcatenatedWith | '..' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:44:261:46 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:59 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:52:261:67 | relative == ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:261:64:261:67 | ".." | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:5:262:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:8:262:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:262:21:262:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:5:264:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:8:264:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:264:21:264:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:7:267:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:17:267:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:28:267:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:267:38:267:41 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:7:268:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:22:268:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:33:268:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:42:268:75 | pathMod ... aceDir) | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:53:268:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:63:268:74 | workspaceDir | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:268:78:268:84 | newpath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | exceptional return of relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:49 | relativ ... le.sep) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:7:269:55 | relativ ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:20:269:26 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:31 | '..' | stringConcatenatedWith |  -endpoint- pathModule.sep |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | CalleeFlexibleAccessPath | relativePath.indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:28:269:48 | '..' +  ... ule.sep | receiverName | relativePath |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:44 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:35:269:48 | pathModule.sep | stringConcatenatedWith | '..' -endpoint-  |
| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:46:269:48 | sep | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:269:55:269:55 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:5:270:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:8:270:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:270:21:270:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:5:272:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:8:272:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:272:21:272:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:7:275:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:17:275:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:28:275:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:275:38:275:41 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:7:276:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:22:276:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:33:276:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:42:276:75 | pathMod ... aceDir) | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:53:276:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:63:276:74 | workspaceDir | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:276:78:276:84 | newpath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | exceptional return of relativ ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:33 | relativ ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:7:277:39 | relativ ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:20:277:26 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | CalleeFlexibleAccessPath | relativePath.indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:277:28:277:32 | '../' | receiverName | relativePath |
| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:277:39:277:39 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:5:278:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:8:278:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:278:21:278:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:5:280:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:8:280:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:280:21:280:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:7:283:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:17:283:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:28:283:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:283:38:283:41 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:7:284:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:22:284:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:33:284:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:42:284:75 | pathMod ... aceDir) | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:53:284:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:63:284:74 | workspaceDir | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:284:78:284:84 | newpath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:26 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | exceptional return of pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:40 | pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | exceptional return of pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:55 | pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:7:285:61 | pathMod ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:18:285:26 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:28:285:39 | relativePath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:42:285:48 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | CalleeFlexibleAccessPath | pathModule.normalize().indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:50:285:54 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:285:61:285:61 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:5:286:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:8:286:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:286:21:286:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:5:288:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:8:288:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:288:21:288:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:13 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:7:291:42 | newpath ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:36 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:17:291:42 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:28:291:36 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:291:38:291:41 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:18 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativ ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:7:292:85 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:40 | pathModule.relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | exceptional return of pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:22:292:85 | pathMod ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:33:292:40 | relative | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:51 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:61 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | exceptional return of pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:42:292:75 | pathMod ... aceDir) | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:53:292:61 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:63:292:74 | workspaceDir | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | CalleeFlexibleAccessPath | pathModule.relative |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:292:78:292:84 | newpath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:26 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | exceptional return of pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:40 | pathMod ... vePath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | exceptional return of pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:7:293:55 | pathMod ... ('../') | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:18:293:26 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:28:293:39 | relativePath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:42:293:48 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | CalleeFlexibleAccessPath | pathModule.normalize().indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:293:50:293:54 | '../' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:5:294:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:8:294:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:294:21:294:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | exceptional return of fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:5:296:28 | fs.read ... ewpath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:8:296:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path self something relative pathModule relative self webroot path relative startsWith .. pathModule sep relative .. fs readFileSync path fs readFileSync path newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf .. pathModule sep 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ 0 fs readFileSync newpath fs readFileSync newpath newpath pathModule normalize path relativePath pathModule relative pathModule normalize workspaceDir newpath pathModule normalize relativePath indexOf ../ fs readFileSync newpath fs readFileSync newpath |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:296:21:296:27 | newpath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:16 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathI ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:5:300:44 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:26 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | exceptional return of require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:20:300:44 | require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:300:28:300:43 | "is-path-inside" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:16 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsI ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:5:301:44 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:26 | require | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | exceptional return of require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:20:301:44 | require ... nside") | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | calleeImports |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:301:28:301:43 | "path-is-inside" | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:302:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | app.get ... \\n\\t}\\n\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:1:336:2 | exceptional return of app.get ... \\n\\t}\\n\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:5:302:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:9:302:32 | '/pseud ... ations' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:302:34 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | (req, r ... \\n\\n\\t}\\n\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:35:336:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:36:302:38 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:302:41:302:43 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:9 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path =  ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:6:303:26 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:15 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:21 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:13:303:26 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:17:303:21 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:303:23:303:26 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:2:304:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:5:304:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:304:18:304:21 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:17 | isPathInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | exceptional return of isPathI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:305:6:305:29 | isPathI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:3:306:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:6:306:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:306:19:306:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:3:309:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:6:309:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:309:19:309:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:312:6:312:29 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:312:19:312:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:312:25:312:28 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:3:313:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:6:313:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:313:19:313:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:3:316:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:6:316:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:316:19:316:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:19 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normali ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:6:320:49 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:37 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:23:320:49 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:34:320:37 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:39:320:42 | SAFE | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:320:45:320:48 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:321:6:321:39 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:321:19:321:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:321:35:321:38 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:3:322:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:6:322:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:322:19:322:32 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:3:325:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:6:325:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:325:19:325:32 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:17 | pathIsInside | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | exceptional return of pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:328:6:328:39 | pathIsI ... , SAFE) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:328:19:328:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | CalleeFlexibleAccessPath | pathIsInside |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | calleeImports | path-is-inside |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:328:35:328:38 | SAFE | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:3:329:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:6:329:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:329:19:329:32 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | exceptional return of fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:3:332:33 | fs.read ... edPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:6:332:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | enclosingFunctionBody | req res path req query path fs readFileSync path isPathInside path SAFE fs readFileSync path fs readFileSync path pathIsInside path SAFE fs readFileSync path fs readFileSync path normalizedPath pathModule join SAFE path pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath pathIsInside normalizedPath SAFE fs readFileSync normalizedPath fs readFileSync normalizedPath |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:332:19:332:32 | normalizedPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:338:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:1:350:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:5:338:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:9:338:29 | '/yet-a ... prefix' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:338:31 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:32:350:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:33:338:35 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:338:38:338:40 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:9 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path =  ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path =  ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path =  ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path =  ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:6:339:46 | path =  ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:22 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:30 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | exceptional return of pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:13:339:46 | pathMod ... y.path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:24:339:30 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:34 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:40 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:32:339:45 | req.query.path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:36:339:40 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:339:42:339:45 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:2:341:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:5:341:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:341:18:341:21 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:8 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:6:343:35 | abs = p ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:21 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:29 | pathModule.resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:12:343:35 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:23:343:29 | resolve | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | CalleeFlexibleAccessPath | pathModule.resolve |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:343:31:343:34 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:8 | abs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | abs.indexOf(root) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:22 | exceptional return of abs.indexOf(root) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:6:345:28 | abs.ind ... ) !== 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:10:345:16 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | CalleeFlexibleAccessPath | abs.indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:345:18:345:21 | root | receiverName | abs |
| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:345:28:345:28 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:3:346:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:6:346:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:346:19:346:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:3 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:16 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:2:349:22 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:5:349:16 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | enclosingFunctionBody | req res path pathModule resolve req query path fs readFileSync path abs pathModule resolve path abs indexOf root 0 fs readFileSync path fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:349:18:349:21 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:12 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPat ... s.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:5:352:28 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:22 | process | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:26 | process.cwd | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | exceptional return of process.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:16:352:28 | process.cwd() | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:352:24:352:26 | cwd | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:353:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:1:373:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:5:353:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:9:353:30 | '/yet-a ... refix2' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:353:32 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | (req, r ... ;\\n  }\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:33:373:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:34:353:36 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:353:39:353:41 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path =  ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:7:354:27 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:14:354:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:18:354:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:354:24:354:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:3:356:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:6:356:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:356:19:356:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:17 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | request ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:7:358:51 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:30 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:35 | pathModule.join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | exceptional return of pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:21:358:51 | pathMod ... , path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:32:358:35 | join | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:37:358:44 | rootPath | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | CalleeFlexibleAccessPath | pathModule.join |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:358:47:358:50 | path | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:360:7:360:16 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:7:361:39 | !allowP ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:16 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | allowPa ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:8:361:39 | exceptional return of allowPa ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | CalleeFlexibleAccessPath | allowPath |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:18:361:28 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | CalleeFlexibleAccessPath | allowPath |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:361:31:361:38 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:14 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetP ... ootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:362:5:362:25 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:362:18:362:25 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | exceptional return of fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:5:363:32 | fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:8:363:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:363:21:363:31 | requestPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:14 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetP ... estPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:365:5:365:28 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:365:18:365:28 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | exceptional return of fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:5:366:32 | fs.read ... stPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:8:366:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:366:21:366:31 | requestPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:3 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | exceptional return of fs.read ... etPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:3:368:29 | fs.read ... etPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:6:368:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:368:19:368:28 | targetPath | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:370:2 | this | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | 'arguments' object of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | exceptional return of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ...  0;\\n  } | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ...  0;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ...  0;\\n  } | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ...  0;\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | functio ...  0;\\n  } | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:3:372:3 | return of function allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:12:370:20 | allowPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:22:370:32 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:370:35:370:42 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:22 | requestPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | exceptional return of request ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:40 | request ... otPath) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:12:371:46 | request ... ) === 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:24:371:30 | indexOf | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | CalleeFlexibleAccessPath | requestPath.indexOf |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:371:32:371:39 | rootPath | receiverName | requestPath |
| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | contextSurroundingFunctionParameters | (requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | enclosingFunctionBody | req res path req query path fs readFileSync path requestPath pathModule join rootPath path targetPath allowPath requestPath rootPath targetPath rootPath fs readFileSync requestPath targetPath requestPath fs readFileSync requestPath fs readFileSync targetPath allowPath requestPath rootPath requestPath indexOf rootPath 0 |
| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:371:46:371:46 | 0 | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import  ... slash'; | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import  ... slash'; | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:1:375:26 | import  ... slash'; | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:375:8:375:12 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:375:19:375:25 | 'slash' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:376:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:1:382:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:5:376:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:9:376:22 | '/slash-stuff' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:376:24 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | (req, r ... OT OK\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:25:382:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:26:376:28 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:376:31:376:33 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path =  ... ry.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path =  ... ry.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path =  ... ry.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:7:377:27 | path =  ... ry.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:16 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:22 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:14:377:27 | req.query.path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:18:377:22 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:377:24:377:27 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:3:379:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:6:379:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:379:19:379:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | exceptional return of fs.read ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:3:381:30 | fs.read ... (path)) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:6:381:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:23 | slash | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | exceptional return of slash(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:381:19:381:29 | slash(path) | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | CalleeFlexibleAccessPath | slash |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | calleeImports | slash |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | enclosingFunctionBody | req res path req query path fs readFileSync path fs readFileSync slash path |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:381:25:381:28 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:3 | app | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:384:7 | app.get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:1:404:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:5:384:7 | get | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:9:384:24 | '/dotdot-regexp' | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:384:26 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | 'arguments' object of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | calleeImports | express |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | (req, r ... K\\n  }\\n} | receiverName | app |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | exceptional return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:27:404:1 | return of anonymous function | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:28:384:30 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:384:33:384:35 | res | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:10 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path =  ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path =  ... uery.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path =  ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path =  ... uery.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:7:385:46 | path =  ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:23 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:33 | pathModule.normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | exceptional return of pathMod ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:14:385:46 | pathMod ... uery.x) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:25:385:33 | normalize | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:37 | req | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:43 | req.query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | CalleeFlexibleAccessPath | pathModule.normalize |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:35:385:45 | req.query.x | receiverName | pathModule |
| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:39:385:43 | query | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:385:45:385:45 | x | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:16 | pathModule | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:27 | pathMod ... bsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | exceptional return of pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:386:7:386:33 | pathMod ... e(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:386:18:386:27 | isAbsolute | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:4 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:17 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:3:388:23 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:6:388:17 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:388:19:388:22 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:7:389:23 | !path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | exceptional return of path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:8:389:23 | path.match(/\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:13:389:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | CalleeFlexibleAccessPath | path.match |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:389:19:389:22 | /\\./ | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:5:390:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:8:390:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:390:21:390:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:7:392:25 | !path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | exceptional return of path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:8:392:25 | path.match(/\\.\\./) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:13:392:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | CalleeFlexibleAccessPath | path.match |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:392:19:392:24 | /\\.\\./ | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:5:393:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:8:393:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:393:21:393:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:7:395:27 | !path.m ... .\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | exceptional return of path.match(/\\.\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:8:395:27 | path.match(/\\.\\.\\//) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:13:395:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | CalleeFlexibleAccessPath | path.match |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:395:19:395:26 | /\\.\\.\\// | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:5:396:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:8:396:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:396:21:396:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:7:398:30 | !path.m ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | exceptional return of path.ma ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:8:398:30 | path.ma ... \\/foo/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:13:398:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | CalleeFlexibleAccessPath | path.match |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:398:19:398:29 | /\\.\\.\\/foo/ | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:5:399:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:8:399:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:399:21:399:24 | path | receiverName | fs |
| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:7:401:36 | !path.m ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:11 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:17 | path.match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | exceptional return of path.ma ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:8:401:36 | path.ma ... \\.\\\\)/) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:13:401:17 | match | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | CalleeFlexibleAccessPath | path.match |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | calleeImports | path |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:401:19:401:35 | /(\\.\\.\\/\|\\.\\.\\\\)/ | receiverName | path |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:6 | fs | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:19 | fs.readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | exceptional return of fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:5:402:25 | fs.read ... c(path) | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:8:402:19 | readFileSync | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | calleeImports | fs |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | contextFunctionInterfaces | allowPath(requestPath, rootPath) |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | enclosingFunctionBody | req res path pathModule normalize req query x pathModule isAbsolute path fs readFileSync path path match /\\./ fs readFileSync path path match /\\.\\./ fs readFileSync path path match /\\.\\.\\// fs readFileSync path path match /\\.\\.\\/foo/ fs readFileSync path path match /(\\.\\.\\/\|\\.\\.\\\\)/ fs readFileSync path |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | fileImports | express fs is-path-inside path path-is-inside sanitize-filename slash url |
| autogenerated/TaintedPath/normalizedPaths.js:402:21:402:24 | path | receiverName | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:0 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:1:1:1 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:8 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http =  ... "http") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http =  ... "http") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:5:1:26 | http =  ... "http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | exceptional return of require("http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:12:1:26 | require("http") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:1:20:1:25 | "http" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:5 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:3:2:22 | url = require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:15 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | exceptional return of require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:9:2:22 | require("url") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:2:17:2:21 | "url" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:3:3:20 | fs = require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:14 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | exceptional return of require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:8:3:20 | require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:3:16:3:19 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:12 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefu ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:3:4:37 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | exceptional return of require ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:16:4:37 | require ... ul-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:4:24:4:36 | "graceful-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:9 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:3:5:31 | fsExtra ... extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:19 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | exceptional return of require("fs-extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:13:5:31 | require("fs-extra") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:5:21:5:30 | "fs-extra" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:12 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | origina ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:3:6:37 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | exceptional return of require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:16:6:37 | require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:6:24:6:36 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:8:10 | server | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server  ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:5:25:2 | server  ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:17 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:8:30 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:14:25:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:19:8:30 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:8:31 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:32:25:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:41:8:43 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:8:46:8:48 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path =  ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:7:9:48 | path =  ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:14:9:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:18:9:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:24:9:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:28:9:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:33:9:36 | true | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:39:9:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:9:45:9:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:3:11:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:6:11:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:11:19:11:22 | path | receiverName | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:12 | gracefulFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:25 | gracefu ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | exceptional return of gracefu ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:3:12:31 | gracefu ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:14:12:25 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | CalleeFlexibleAccessPath | gracefulFs.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | calleeImports | graceful-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:12:27:12:30 | path | receiverName | gracefulFs |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:9 | fsExtra | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:22 | fsExtra.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | exceptional return of fsExtra ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:3:13:28 | fsExtra ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:11:13:22 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | CalleeFlexibleAccessPath | fsExtra.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | calleeImports | fs-extra |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:13:24:13:27 | path | receiverName | fsExtra |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:12 | originalFs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:25 | origina ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | exceptional return of origina ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:3:14:31 | origina ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:14:14:25 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | CalleeFlexibleAccessPath | originalFs.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | calleeImports | original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:14:27:14:30 | path | receiverName | originalFs |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:13 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | exceptional return of getFsModule(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:19 | getFsModule(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:32 | getFsMo ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | exceptional return of getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:3:16:38 | getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | CalleeFlexibleAccessPath | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:15:16:18 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:21:16:32 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | CalleeFlexibleAccessPath | getFsModule().readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:16:34:16:37 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:13 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | exceptional return of getFsModule(false) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:20 | getFsModule(false) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:33 | getFsMo ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | exceptional return of getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:3:17:39 | getFsMo ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | CalleeFlexibleAccessPath | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:15:17:19 | false | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:22:17:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | CalleeFlexibleAccessPath | getFsModule().readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:17:35:17:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | exceptional return of require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:27 | require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:35 | require ... require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | exceptional return of require ... e(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:41 | require ... e(true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:54 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:3:19:60 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:11:19:26 | "./my-fs-module" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:29:19:35 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | CalleeFlexibleAccessPath | import("p").require |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | calleeImports | ./my-fs-module |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:37:19:40 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:43:19:54 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | CalleeFlexibleAccessPath | import("p").require().readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | calleeImports | ./my-fs-module |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:19:56:19:59 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:21:24 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibl ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:7:23:11 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:21:34 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | exceptional return of require ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:28:23:11 | require ... : "fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:42 | process | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:51 | process.versions | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:21:63 | process ... ctron"] | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:36:23:10 | process ...  : "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:44:21:51 | versions | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:21:53:21:62 | "electron" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:22:7:22:19 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:23:7:23:10 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:20 | flexibleModuleName | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:33 | flexibl ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | exceptional return of flexibl ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:3:24:39 | flexibl ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:22:24:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | CalleeFlexibleAccessPath | flexibleModuleName.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path gracefulFs readFileSync path fsExtra readFileSync path originalFs readFileSync path getFsModule true readFileSync path getFsModule false readFileSync path require ./my-fs-module require true readFileSync path flexibleModuleName require process electron versions electron original-fs fs flexibleModuleName readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:24:35:24:38 | path | receiverName | flexibleModuleName |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:27:0 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | 'arguments' object of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | exceptional return of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n  }\\n} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | functio ... ;\\n  }\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:1:33:1 | return of function getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:10:27:20 | getFsModule | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:27:22:27:28 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:28:7:28:13 | special | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | exceptional return of require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:29:12:29:24 | require("fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:29:20:29:23 | "fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | exceptional return of require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:31:12:31:33 | require ... al-fs") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | contextSurroundingFunctionParameters | (special) |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | enclosingFunctionBody | special special require fs require original-fs |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | enclosingFunctionName | getFsModule |
| autogenerated/TaintedPath/other-fs-libraries.js:31:20:31:32 | "original-fs" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:8 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util =  ... "util") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util =  ... "util") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:5:35:26 | util =  ... "util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | exceptional return of require("util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:12:35:26 | require("util") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:35:20:35:25 | "util" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:37:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:1:43:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:6:37:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:37:18 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:19:43:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:28:37:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:37:33:37:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path =  ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:7:38:48 | path =  ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:14:38:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:18:38:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:24:38:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:28:38:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:33:38:36 | true | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:39:38:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:38:45:38:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:6 | util | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:16 | util.promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | exceptional return of util.pr ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:33 | util.pr ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | exceptional return of util.pr ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:3:40:39 | util.pr ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:8:40:16 | promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:19 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | CalleeFlexibleAccessPath | util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | calleeImports | util |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:18:40:32 | fs.readFileSync | receiverName | util |
| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:21:40:32 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | CalleeFlexibleAccessPath | util.promisify() |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | calleeImports | util |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:40:35:40:38 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | exceptional return of require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:21 | require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:31 | require ... omisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:48 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:3:41:54 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:11:41:20 | "bluebird" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:23:41:31 | promisify | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:34 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | CalleeFlexibleAccessPath | import(!).promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | calleeImports | bluebird |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:33:41:47 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:36:41:47 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | CalleeFlexibleAccessPath | import(!).promisify() |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | calleeImports | bluebird |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:41:50:41:53 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | exceptional return of require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:21 | require("bluebird") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:34 | require ... sifyAll | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | exceptional return of require ... All(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:38 | require ... All(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:51 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:3:42:57 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:11:42:20 | "bluebird" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:23:42:34 | promisifyAll | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | CalleeFlexibleAccessPath | import(!).promisifyAll |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | calleeImports | bluebird |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:36:42:37 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:40:42:51 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | CalleeFlexibleAccessPath | import(!).promisifyAll().readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | calleeImports | bluebird |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | enclosingFunctionBody | req res path url parse req url true query path util promisify fs readFileSync path require bluebird promisify fs readFileSync path require bluebird promisifyAll fs readFileSync path |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:42:53:42:56 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:13 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:7:46:47 | asyncFS ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:23 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | exceptional return of require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:17:46:47 | require ... odule") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:46:25:46:46 | "./my-a ... module" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:48:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:1:64:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:6:48:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:48:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:19:64:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:28:48:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:48:33:48:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path =  ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:7:49:48 | path =  ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:14:49:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:18:49:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:24:49:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:28:49:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:33:49:36 | true | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:39:49:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:49:45:49:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:3:51:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:6:51:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:51:19:51:22 | path | receiverName | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:9 | asyncFS | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:22 | asyncFS.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | asyncFS ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:3:52:28 | exceptional return of asyncFS ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:11:52:22 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | CalleeFlexibleAccessPath | asyncFS.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | calleeImports | ./my-async-fs-module |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:52:24:52:27 | path | receiverName | asyncFS |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | exceptional return of require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:17 | require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:34 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:3:54:40 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:11:54:16 | "pify" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | calleeImports | pify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:19:54:33 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:22:54:33 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | CalleeFlexibleAccessPath | import(!)() |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | calleeImports | pify |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:54:36:54:39 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | exceptional return of require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:17 | require("pify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | exceptional return of require("pify")(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:21 | require("pify")(fs) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:34 | require ... ileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | exceptional return of require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:3:55:40 | require ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:11:55:16 | "pify" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | calleeImports | pify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:19:55:20 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:23:55:34 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | CalleeFlexibleAccessPath | import(!)().readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | calleeImports | pify |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:55:36:55:39 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | exceptional return of require ... isify') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:27 | require ... isify') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:44 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:3:57:50 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:11:57:26 | 'util.promisify' | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:30 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | calleeImports | util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:29:57:43 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:32:57:43 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | CalleeFlexibleAccessPath | import(!)() |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | calleeImports | util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:57:46:57:49 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:9 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | exceptional return of require("thenify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:20 | require("thenify") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | exceptional return of require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:37 | require ... leSync) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | exceptional return of require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:3:59:43 | require ... )(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:11:59:19 | "thenify" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:23 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | CalleeFlexibleAccessPath | import(!) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | calleeImports | thenify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:22:59:36 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:25:59:36 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | CalleeFlexibleAccessPath | import(!)() |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | calleeImports | thenify |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:59:39:59:42 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:15 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:9:61:37 | readPkg ... d-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:25 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | exceptional return of require('read-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:19:61:37 | require('read-pkg') | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:61:27:61:36 | 'read-pkg' | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:9 | pkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:7:62:48 | pkg = r ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:19 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:35 | readPkg ... ageSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ...  path}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | exceptional return of readPkg ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:13:62:48 | readPkg ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:21:62:35 | readPackageSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | CalleeFlexibleAccessPath | readPkg.readPackageSync |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | calleeImports | read-pkg |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:37:62:47 | {cwd: path} | receiverName | readPkg |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:40 | cwd | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:38:62:46 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | CalleeFlexibleAccessPath | readPkg.readPackageSync |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | InputAccessPathFromCallee | 0.cwd |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | assignedToPropName | cwd |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | calleeImports | read-pkg |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:62:43:62:46 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:16 | pkgPromise | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:7:63:56 | pkgProm ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:26 | readPkg | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:43 | readPkg ... geAsync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ...  path}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | exceptional return of readPkg ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ...  path}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ...  path}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ...  path}) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ...  path}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:20:63:56 | readPkg ...  path}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:28:63:43 | readPackageAsync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | CalleeFlexibleAccessPath | readPkg.readPackageAsync |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | calleeImports | read-pkg |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:45:63:55 | {cwd: path} | receiverName | readPkg |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:48 | cwd | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:46:63:54 | cwd: path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | CalleeFlexibleAccessPath | readPkg.readPackageAsync |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | InputAccessPathFromCallee | 0.cwd |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | assignedToPropName | cwd |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | calleeImports | read-pkg |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path asyncFS readFileSync path require pify fs readFileSync path require pify fs readFileSync path require util.promisify fs readFileSync path require thenify fs readFileSync path readPkg require read-pkg pkg readPkg readPackageSync cwd path pkgPromise readPkg readPackageAsync cwd path |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:63:51:63:54 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:12 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp  ... kdirp") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp  ... kdirp") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:7:66:32 | mkdirp  ... kdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:22 | require | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | exceptional return of require("mkdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:16:66:32 | require("mkdirp") | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | calleeImports |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:66:24:66:31 | "mkdirp" | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:4 | http | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:67:17 | http.createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:1:73:2 | http.cr ... T OK\\n}) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:6:67:17 | createServer | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | this | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:67:18 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | 'arguments' object of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | exceptional return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:19:73:1 | return of anonymous function | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:28:67:30 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:67:33:67:35 | res | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:10 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path =  ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:7:68:48 | path =  ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:16 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:22 | url.parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | exceptional return of url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:37 | url.par ... , true) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:43 | url.par ... ).query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:14:68:48 | url.par ... ry.path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:18:68:22 | parse | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:26 | req | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:24:68:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:28:68:30 | url | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | calleeImports | url |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:33:68:36 | true | receiverName | url |
| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:39:68:43 | query | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:68:45:68:48 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:4 | fs | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:17 | fs.readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | exceptional return of fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:3:70:23 | fs.read ... c(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:6:70:17 | readFileSync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:70:19:70:22 | path | receiverName | fs |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:8 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | exceptional return of mkdirp(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:71:3:71:14 | mkdirp(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | CalleeFlexibleAccessPath | mkdirp |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | calleeImports | mkdirp |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:71:10:71:13 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:8 | mkdirp | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:13 | mkdirp.sync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | exceptional return of mkdirp.sync(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:3:72:19 | mkdirp.sync(path) | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:10:72:13 | sync | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | CalleeFlexibleAccessPath | mkdirp.sync |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | calleeImports | mkdirp |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | contextFunctionInterfaces | getFsModule(special) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path mkdirp path mkdirp sync path |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | fileImports | ./my-async-fs-module ./my-fs-module bluebird fs fs-extra graceful-fs http mkdirp original-fs pify read-pkg thenify url util util.promisify |
| autogenerated/TaintedPath/other-fs-libraries.js:72:15:72:18 | path | receiverName | mkdirp |
| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:0 | this | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:1:1:1 | require | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:13 | express | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:7:1:34 | express ... press') | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:23 | require | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | exceptional return of require('express') | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:17:1:34 | require('express') | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:1:25:1:33 | 'express' | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:14 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettie ... ttier") | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:7:2:36 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:24 | require | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | exceptional return of require("prettier") | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:18:2:36 | require("prettier") | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | calleeImports |  |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:2:26:2:35 | "prettier" | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:9 | app | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:7:4:21 | app = express() | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:19 | express | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | exceptional return of express() | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:4:13:4:21 | express() | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:1:5:3 | app | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:1:5:7 | app.get | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | app.get ...  });\\n}) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:1:14:2 | exceptional return of app.get ...  });\\n}) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:5:5:7 | get | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | calleeImports | express |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:9:5:20 | '/some/path' | receiverName | app |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:23:5:22 | this | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | 'arguments' object of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | exceptional return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | calleeImports | express |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | functio ...   });\\n} | receiverName | app |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:23:14:1 | return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:33:5:35 | req | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:5:38:5:40 | res | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:11:6:15 | { p } | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:11:6:28 | { p } = req.params | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:13:6:13 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:19:6:21 | req | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:19:6:28 | req.params | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:6:23:6:28 | params | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:7:12 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:7:26 | prettie ... eConfig | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | exceptional return of prettie ... nfig(p) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:7:29 | prettie ... nfig(p) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:7:34 | prettie ... p).then | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n    }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | exceptional return of prettie ... \\n    }) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n    }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:5:9:6 | prettie ... \\n    }) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:14:7:26 | resolveConfig | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | CalleeFlexibleAccessPath | prettier.resolveConfig |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:28:7:28 | p | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:31:7:34 | then | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:36:7:35 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | 'arguments' object of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | CalleeFlexibleAccessPath | prettier.resolveConfig().then |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | (option ... ;\\n    } | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | exceptional return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:36:9:5 | return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:7:37:7:43 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:15:8:23 | formatted | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:15:8:57 | formatt ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:27:8:34 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:27:8:41 | prettier.format | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | exceptional return of prettie ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:27:8:57 | prettie ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:36:8:41 | format | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:43:8:47 | "foo" | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:8:50:8:56 | options | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:11:12 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:11:26 | prettie ... eConfig | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | exceptional return of prettie ... ig: p}) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:11:46 | prettie ... ig: p}) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:11:51 | prettie ... }).then | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n    }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | exceptional return of prettie ... \\n    }) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n    }) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:5:13:6 | prettie ... \\n    }) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:14:11:26 | resolveConfig | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | CalleeFlexibleAccessPath | prettier.resolveConfig |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:28:11:32 | "foo" | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | CalleeFlexibleAccessPath | prettier.resolveConfig |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:35:11:45 | {config: p} | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:36:11:41 | config | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:36:11:44 | config: p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | CalleeFlexibleAccessPath | prettier.resolveConfig |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | InputAccessPathFromCallee | 1.config |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | assignedToPropName | config |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:44:11:44 | p | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:48:11:51 | then | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:53:11:52 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | 'arguments' object of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | CalleeFlexibleAccessPath | prettier.resolveConfig().then |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | (option ... ;\\n    } | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | exceptional return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:53:13:5 | return of anonymous function | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:11:54:11:60 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:15:12:23 | formatted | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:15:12:57 | formatt ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:27:12:34 | prettier | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:27:12:41 | prettier.format | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | exceptional return of prettie ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:27:12:57 | prettie ... ptions) | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:36:12:41 | format | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:43:12:47 | "bar" | receiverName | prettier |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | calleeImports | prettier |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | contextSurroundingFunctionParameters | (req, res)\n(options) |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | enclosingFunctionBody | req res p req params prettier resolveConfig p then options formatted prettier format foo options prettier resolveConfig foo config p then options formatted prettier format bar options |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | fileImports | express prettier |
| autogenerated/TaintedPath/prettier.js:12:50:12:56 | options | receiverName | prettier |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:0 | this | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | parseTorrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | puppeteer | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:1:1:1 | require | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:15 | puppeteer | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppete ... eteer') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:7:1:38 | puppeteer | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:25 | require | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | exceptional return of require('puppeteer') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:19:1:38 | require('puppeteer') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | calleeImports |  |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:1:27:1:37 | 'puppeteer' | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:18 | parseTorrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTo ... rrent') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:7:2:45 | parseTorrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:28 | require | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | exceptional return of require ... rrent') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:22:2:45 | require ... rrent') | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | calleeImports |  |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:2:30:2:44 | 'parse-torrent' | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async  ... e();\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async  ... e();\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:2 | (async  ... e();\\n}) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async  ... );\\n})() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async  ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | (async  ... );\\n})() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async  ... );\\n})() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async  ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:1:17:4 | exceptional return of (async  ... );\\n})() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | parseTorrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:4:1 | puppeteer | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | 'arguments' object of anonymous function | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | async ( ... se();\\n} | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | exceptional return of anonymous function | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:4:2:17:1 | return of anonymous function | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:15 | tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:9:5:71 | tainted ... t.data" | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:24 | "dir/" | stringConcatenatedWith |  -endpoint- parseTorrent().name + '.torrent.data' |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/"  ... t).name | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/"  ... t).name | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/"  ... t).name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/"  ... t).name | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:53 | "dir/"  ... t).name | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/"  ... t.data" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/"  ... t.data" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/"  ... t.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/"  ... t.data" | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:19:5:71 | "dir/"  ... t.data" | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:39 | parseTorrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | exceptional return of parseTo ... orrent) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:48 | parseTo ... orrent) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:28:5:53 | parseTo ... t).name | stringConcatenatedWith | 'dir/' -endpoint- '.torrent.data' |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | CalleeFlexibleAccessPath | parseTorrent |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | calleeImports | parse-torrent |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:41:5:47 | torrent | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:50:5:53 | name | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:5:57:5:71 | ".torrent.data" | stringConcatenatedWith | 'dir/' + parseTorrent().name -endpoint-  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:17 | browser | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:11:7:44 | browser ... aunch() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:21:7:44 | await p ... aunch() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:35 | puppeteer | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:42 | puppeteer.launch | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | exceptional return of puppeteer.launch() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:27:7:44 | puppeteer.launch() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:7:37:7:42 | launch | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:14 | page | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page =  ... wPage() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page =  ... wPage() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page =  ... wPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page =  ... wPage() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:11:8:40 | page =  ... wPage() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:18:8:40 | await b ... wPage() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:30 | browser | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:38 | browser.newPage | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | browser.newPage() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:24:8:40 | exceptional return of browser.newPage() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:8:32:8:38 | newPage | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:5:9:51 | await p ... 'a4' }) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:14 | page | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:18 | page.pdf | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | exceptional return of page.pd ... 'a4' }) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:11:9:51 | page.pd ... 'a4' }) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:16:9:18 | pdf | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | CalleeFlexibleAccessPath | page.pdf |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | calleeImports | puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:20:9:50 | { path: ...  'a4' } | receiverName | page |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:25 | path | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:22:9:34 | path: tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | CalleeFlexibleAccessPath | page.pdf |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | InputAccessPathFromCallee | 0.path |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | assignedToPropName | path |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | calleeImports | puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:28:9:34 | tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:42 | format | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:37:9:48 | format: 'a4' | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | CalleeFlexibleAccessPath | page.pdf |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | InputAccessPathFromCallee | 0.format |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | assignedToPropName | format |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | calleeImports | puppeteer |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:9:45:9:48 | 'a4' | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:15 | pages | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:11:11:39 | pages = ... pages() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:19:11:39 | await b ... pages() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:31 | browser | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:37 | browser.pages | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | browser.pages() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:25:11:39 | exceptional return of browser.pages() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:11:33:11:37 | pages | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:14 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:14:12:18 | i = 0 | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:18:12:18 | 0 | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:21 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:21:12:35 | i < something() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:33 | something | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | exceptional return of something() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:25:12:35 | something() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:38 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:12:38:12:40 | i++ | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:13 | pages | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:16 | pages[i] | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:27 | pages[i].screenshot | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | exceptional return of pages[i ... nted }) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:9:13:46 | pages[i ... nted }) | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:15:13:15 | i | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:18:13:27 | screenshot | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | CalleeFlexibleAccessPath | pages.?.screenshot |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | calleeImports | puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:29:13:45 | { path: tainted } | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:34 | path | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:31:13:43 | path: tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | CalleeFlexibleAccessPath | pages.?.screenshot |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | InputAccessPathFromCallee | 0.path |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | assignedToPropName | path |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | calleeImports | puppeteer |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:13:37:13:43 | tainted | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:5:16:25 | await b ... close() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:17 | browser | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:23 | browser.close | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | browser.close() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:11:16:25 | exceptional return of browser.close() | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | contextSurroundingFunctionParameters | () |
| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | enclosingFunctionBody | tainted dir/ parseTorrent torrent name .torrent.data browser puppeteer launch page browser newPage page pdf path tainted format a4 pages browser pages i 0 i something i pages i screenshot path tainted browser close |
| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | enclosingFunctionName |  |
| autogenerated/TaintedPath/pupeteer.js:16:19:16:23 | close | fileImports | parse-torrent puppeteer |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:0 | this | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | chownr | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | nodefs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:1:1:1 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:6 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:5:1:22 | fs = require('fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:16 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | exceptional return of require('fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:10:1:22 | require('fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:1:18:1:21 | 'fs' | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:8 | http | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:5:2:26 | http =  ... 'http') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:18 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | exceptional return of require('http') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:12:2:26 | require('http') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:2:20:2:25 | 'http' | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:7 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:5:3:24 | url = require('url') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:17 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | exceptional return of require('url') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:11:3:24 | require('url') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:3:19:3:23 | 'url' | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:5:10 | server | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server  ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server  ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:5:32:2 | server  ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:17 | http | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:5:30 | http.createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:14:32:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:19:5:30 | createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | this | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:5:31 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:32:32:1 | return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:41:5:43 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:5:46:5:48 | res | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:10 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:7:6:48 | path =  ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:16 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:22 | url.parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:37 | url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:43 | url.par ... ).query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:14:6:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:18:6:22 | parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:26 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:24:6:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:28:6:30 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:33:6:36 | true | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:39:6:43 | query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:6:45:6:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:4 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:17 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | exceptional return of fs.read ... c(path) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:3:8:23 | fs.read ... c(path) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:6:8:17 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:8:19:8:22 | path | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:9 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ...  : path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ...  : path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ...  : path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ...  : path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:7:10:36 | obj = b ...  : path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:15 | bla | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ...  : path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ...  : path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ...  : path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ...  : path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:13:10:36 | bla ? s ...  : path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:27 | something | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | exceptional return of something() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:19:10:29 | something() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:10:33:10:36 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:4 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:17 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | exceptional return of fs.read ... bj.sub) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:3:12:26 | fs.read ... bj.sub) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:6:12:17 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:21 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:12:19:12:25 | obj.sub | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:12:23:12:25 | sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:5 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:9 | obj.sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:14:3:14:18 | obj.sub = "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:14:7:14:9 | sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | assignedToPropName | sub |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:14:13:14:18 | "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:4 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:17 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | exceptional return of fs.read ... bj.sub) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:3:16:26 | fs.read ... bj.sub) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:6:16:17 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:21 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:16:19:16:25 | obj.sub | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:16:23:16:25 | sub | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:5 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:10 | obj.sub2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:18:3:18:19 | obj.sub2 = "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:18:7:18:10 | sub2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | assignedToPropName | sub2 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:18:14:18:19 | "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:12 | random | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | exceptional return of random() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:19:7:19:14 | random() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:6 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:19 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | exceptional return of fs.read ... j.sub2) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:5:20:29 | fs.read ... j.sub2) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:8:20:19 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:23 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:20:21:20:28 | obj.sub2 | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:20:25:20:28 | sub2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:12 | random | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | exceptional return of random() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:23:7:23:14 | random() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:7 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:12 | obj.sub3 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:24:5:24:21 | obj.sub3 = "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:24:9:24:12 | sub3 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | assignedToPropName | sub3 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:24:16:24:21 | "safe" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:4 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:17 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | exceptional return of fs.read ... j.sub3) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:3:26:27 | fs.read ... j.sub3) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:6:26:17 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:21 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:26:19:26:26 | obj.sub3 | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:26:23:26:26 | sub3 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:5 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:28:10 | obj.sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:28:3:31:31 | obj.sub ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:28:7:28:10 | sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:6 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:19 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:29:29 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | assignedToPropName | sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:5:31:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:8:29:19 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:23 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:29:21:29:28 | obj.sub4 | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:29:25:29:28 | sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:8 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:21 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:7:30:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:10:30:21 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:25 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:30:23:30:30 | obj.sub4 | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:30:27:30:30 | sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:8 | fs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:21 | fs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | exceptional return of fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:7:31:31 | fs.read ... j.sub4) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:10:31:21 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:25 | obj | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | calleeImports | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:31:23:31:30 | obj.sub4 | receiverName | fs |
| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path obj bla something path fs readFileSync obj sub obj sub safe fs readFileSync obj sub obj sub2 safe random fs readFileSync obj sub2 random obj sub3 safe fs readFileSync obj sub3 obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 fs readFileSync obj sub4 |
| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:31:27:31:30 | sub4 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:6 | server | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:13 | server.listen | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | exceptional return of server.listen() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:1:34:15 | server.listen() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:34:8:34:13 | listen | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:10 | nodefs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs  ... de:fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs  ... de:fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:5:36:31 | nodefs  ... de:fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:20 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | exceptional return of require('node:fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:14:36:31 | require('node:fs') | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | calleeImports |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:36:22:36:30 | 'node:fs' | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:38:11 | server2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:5:41:2 | server2 ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:18 | http | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:38:31 | http.createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:15:41:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:20:38:31 | createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | nodefs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | this | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:38:32 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:33:41:1 | return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:42:38:44 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:38:47:38:49 | res | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:10 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:7:39:48 | path =  ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:16 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:22 | url.parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:37 | url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:43 | url.par ... ).query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:14:39:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:18:39:22 | parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:26 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:24:39:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:28:39:30 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:33:39:36 | true | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:39:39:43 | query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:39:45:39:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:8 | nodefs | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:21 | nodefs.readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | exceptional return of nodefs. ... c(path) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:3:40:27 | nodefs. ... c(path) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:10:40:21 | readFileSync | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | CalleeFlexibleAccessPath | nodefs.readFileSync |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | calleeImports | node:fs |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | enclosingFunctionBody | req res path url parse req url true query path nodefs readFileSync path |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:40:23:40:26 | path | receiverName | nodefs |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:7 | server2 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:14 | server2.listen | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | exceptional return of server2.listen() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:1:43:16 | server2.listen() | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:43:9:43:14 | listen | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:12 | chownr | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr  ... hownr") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr  ... hownr") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:7:45:32 | chownr  ... hownr") | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:22 | require | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | exceptional return of require("chownr") | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:16:45:32 | require("chownr") | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | calleeImports |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:45:24:45:31 | "chownr" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:47:11 | server3 | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:5:50:2 | server3 ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:18 | http | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:47:31 | http.createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | exceptional return of http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:15:50:2 | http.cr ... T OK\\n}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:20:47:31 | createServer | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | chownr | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | this | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:47:32 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | calleeImports | http |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | functio ... OT OK\\n} | receiverName | http |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:33:50:1 | return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:43:47:45 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:47:48:47:50 | res | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:10 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:7:48:48 | path =  ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:16 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:22 | url.parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | exceptional return of url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:37 | url.par ... , true) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:43 | url.par ... ).query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:14:48:48 | url.par ... ry.path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:18:48:22 | parse | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:26 | req | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:24:48:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:28:48:30 | url | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | calleeImports | url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:33:48:36 | true | receiverName | url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:39:48:43 | query | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:48:45:48:48 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:8 | chownr | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | chownr( ... rr) {}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:3:49:55 | exceptional return of chownr( ... rr) {}) | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | CalleeFlexibleAccessPath | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | calleeImports | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:10:49:13 | path | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | CalleeFlexibleAccessPath | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | calleeImports | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:16:49:24 | "someuid" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | CalleeFlexibleAccessPath | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | calleeImports | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:27:49:35 | "somegid" | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:37 | this | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | 'arguments' object of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | exceptional return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | CalleeFlexibleAccessPath | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | InputArgumentIndex | 3 |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | calleeImports | chownr |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | function (err) {} | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:38:49:54 | return of anonymous function | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | contextSurroundingFunctionParameters | (req, res)\n(err) |
| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | enclosingFunctionBody | req res path url parse req url true query path chownr path someuid somegid err |
| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-access-paths.js:49:48:49:50 | err | fileImports | chownr fs http node:fs url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:0 | this | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:1:1:1 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:6 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:5:1:22 | fs = require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:16 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:10:1:22 | require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:1:18:1:21 | 'fs' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:8 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:5:2:26 | http =  ... 'http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:18 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | exceptional return of require('http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:12:2:26 | require('http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:2:20:2:25 | 'http' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:7 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:5:3:24 | url = require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:17 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | exceptional return of require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:11:3:24 | require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:3:19:3:23 | 'url' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:12 | sanitize | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:5:4:43 | sanitiz ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:22 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | exceptional return of require ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:16:4:43 | require ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | calleeImports |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:4:24:4:42 | 'sanitize-filename' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:14 | pathModule | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:5:5:32 | pathMod ... 'path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:24 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | exceptional return of require('path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:18:5:32 | require('path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | calleeImports |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:5:26:5:31 | 'path' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:8:10 | server | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server  ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server  ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:5:15:2 | server  ... NCY]\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:17 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:8:30 | http.createServer | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | exceptional return of http.cr ... NCY]\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:14:15:2 | http.cr ... NCY]\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:19:8:30 | createServer | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | this | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:8:31 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | calleeImports | http |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | functio ... ENCY]\\n} | receiverName | http |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:32:15:1 | return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:41:8:43 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:8:46:8:48 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:10 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:7:9:48 | path =  ... ry.path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:16 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:22 | url.parse | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:37 | url.par ... , true) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:43 | url.par ... ).query | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:18:9:22 | parse | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:26 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:24:9:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:28:9:30 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | calleeImports | url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:33:9:36 | true | receiverName | url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:39:9:43 | query | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:9:45:9:48 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:5 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:11 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | exceptional return of res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:3:10:56 | res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:7:10:11 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:14 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | exceptional return of fs.read ... n('/')) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:13:10:55 | fs.read ... n('/')) | receiverName | res |
| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:16:10:27 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:44 | ['public', path] | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:49 | ['publi ... h].join | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | calleeImports | fs |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | ['publi ... in('/') | receiverName | fs |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:29:10:54 | exceptional return of ['publi ... in('/') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:30:10:37 | 'public' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:40:10:43 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:46:10:49 | join | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | CalleeFlexibleAccessPath | ?.join |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:10:51:10:53 | '/' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:11 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:7:12:30 | parts = ... , path] | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:15:12:30 | ['public', path] | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:16:12:23 | 'public' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:12:26:12:29 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:7 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:3:13:41 | parts = ... Case()) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:15 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:19 | parts.map | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | exceptional return of parts.m ... Case()) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:11:13:41 | parts.m ... Case()) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:17:13:19 | map | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:21 | x | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | CalleeFlexibleAccessPath | parts.map |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:21:13:40 | x => x.toLowerCase() | receiverName | parts |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:26 | x | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:38 | x.toLowerCase | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | exceptional return of x.toLowerCase() | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:26:13:40 | x.toLowerCase() | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:13:28:13:38 | toLowerCase | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:5 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:11 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | exceptional return of res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:3:14:45 | res.wri ... ('/'))) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:7:14:11 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:14 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | exceptional return of fs.read ... n('/')) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:13:14:44 | fs.read ... n('/')) | receiverName | res |
| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:16:14:27 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:33 | parts | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:38 | parts.join | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | exceptional return of parts.join('/') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | calleeImports | fs |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:29:14:43 | parts.join('/') | receiverName | fs |
| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:35:14:38 | join | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | CalleeFlexibleAccessPath | parts.join |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync public path join / parts public path parts parts map x x toLowerCase res write fs readFileSync parts join / |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:14:40:14:42 | '/' | receiverName | parts |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:6 | server | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:13 | server.listen | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | exceptional return of server.listen() | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:1:17:15 | server.listen() | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-array-steps.js:17:8:17:13 | listen | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:0 | this | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | __dirname | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | require | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:1:1:1 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:11 | express | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:5:1:32 | express ... press') | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:21 | require | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | exceptional return of require('express') | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:15:1:32 | require('express') | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:1:23:1:31 | 'express' | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:7 | app | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:5:3:19 | app = express() | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:17 | express | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | exceptional return of express() | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:3:11:3:19 | express() | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:3 | app | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:5:7 | app.get | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | app.get ... "));\\n}) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:1:8:2 | exceptional return of app.get ... "));\\n}) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:5:5:7 | get | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | calleeImports | express |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:9:5:20 | '/some/path' | receiverName | app |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | require | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:23:5:22 | this | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | 'arguments' object of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | exceptional return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | calleeImports | express |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | functio ... e"));\\n} | receiverName | app |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:23:8:1 | return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:32:5:34 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:5:37:5:39 | res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:7 | m | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:7:7:38 | m = req ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:17 | require | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | exceptional return of require ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:11:7:38 | require ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:21 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:27 | req.param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | exceptional return of req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | calleeImports |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:19:7:37 | req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:23:7:27 | param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | enclosingFunctionBody | req res m require req param module |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:7:29:7:36 | "module" | receiverName | req |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:13 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:7:10:34 | resolve ... solve") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:23 | require | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | exceptional return of require("resolve") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:17:10:34 | require("resolve") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | calleeImports |  |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:10:25:10:33 | "resolve" | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:3 | app | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:11:7 | app.get | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | app.get ...  });\\n}) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:1:17:2 | exceptional return of app.get ...  });\\n}) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:5:11:7 | get | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | calleeImports | express |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:9:11:20 | '/some/path' | receiverName | app |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | __dirname | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:11:22 | this | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | 'arguments' object of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | exceptional return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | calleeImports | express |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | functio ...   });\\n} | receiverName | app |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:23:17:1 | return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:32:11:34 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:11:37:11:39 | res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:12 | module | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module  ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module  ... dule")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module  ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module  ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:7:12:48 | module  ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:22 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:27 | resolve.sync | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | exceptional return of resolve ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:16:12:48 | resolve ... dule")) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:24:12:27 | sync | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:31 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:37 | req.param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | exceptional return of req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | CalleeFlexibleAccessPath | resolve.sync |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | calleeImports | resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:29:12:47 | req.param("module") | receiverName | resolve |
| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:33:12:37 | param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:12:39:12:46 | "module" | receiverName | req |
| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:3:14:9 | resolve | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n  }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n  }) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | exceptional return of resolve ... s;\\n  }) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n  }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n  }) | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:3:16:4 | resolve ... s;\\n  }) | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:13 | req | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:19 | req.param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | exceptional return of req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | CalleeFlexibleAccessPath | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | calleeImports | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:11:14:29 | req.param("module") | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:15:14:19 | param | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:21:14:28 | "module" | receiverName | req |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | CalleeFlexibleAccessPath | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | calleeImports | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:32:14:53 | { based ... rname } | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:40 | basedir | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:34:14:51 | basedir: __dirname | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | CalleeFlexibleAccessPath | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | InputAccessPathFromCallee | 1.basedir |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | assignedToPropName | basedir |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | calleeImports | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:43:14:51 | __dirname | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:56:14:55 | this | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | 'arguments' object of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | exceptional return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | CalleeFlexibleAccessPath | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | InputArgumentIndex | 2 |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | calleeImports | resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | functio ... es;\\n  } | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:56:16:3 | return of anonymous function | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:65:14:67 | err | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:14:70:14:72 | res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:14 | module | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:15:9:15:20 | module = res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | contextSurroundingFunctionParameters | (req, res)\n(err, res) |
| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | enclosingFunctionBody | req res module resolve sync req param module resolve req param module basedir __dirname err res module res |
| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-require.js:15:18:15:20 | res | fileImports | express resolve |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:0 | this | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:1:1:1 | require | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:11 | express | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:5:1:32 | express ... press') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:21 | require | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | exceptional return of require('express') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:15:1:32 | require('express') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:1:23:1:31 | 'express' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:8 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path =  ... 'path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path =  ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:5:2:26 | path =  ... 'path') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:18 | require | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | exceptional return of require('path') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:12:2:26 | require('path') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | calleeImports |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:2:20:2:25 | 'path' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:7 | app | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:5:4:19 | app = express() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:17 | express | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | exceptional return of express() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:4:11:4:19 | express() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:3 | app | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:6:7 | app.get | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | app.get ... ta/'\\n}) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:1:28:2 | exceptional return of app.get ... ta/'\\n}) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:5:6:7 | get | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | calleeImports | express |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:9:6:23 | '/some/path/:x' | receiverName | app |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:6:25 | this | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | 'arguments' object of anonymous function | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | exceptional return of anonymous function | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | calleeImports | express |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | functio ... ata/'\\n} | receiverName | app |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:26:28:1 | return of anonymous function | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:35:6:37 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:6:40:6:42 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | exceptional return of res.sen ... imme")) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:3:8:34 | res.sen ... imme")) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:7:8:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:18 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:24 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | exceptional return of req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:16:8:33 | req.param("gimme") | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:20:8:24 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:8:26:8:32 | "gimme" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:14 | res.sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | exceptional return of res.sen ... imme")) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:3:10:34 | res.sen ... imme")) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:7:10:14 | sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:18 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:24 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | exceptional return of req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:16:10:33 | req.param("gimme") | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:20:10:24 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:10:26:10:32 | "gimme" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | exceptional return of res.sen ... wd() }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:3:13:59 | res.sen ... wd() }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:7:13:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:18 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:24 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | exceptional return of req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:16:13:33 | req.param("gimme") | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:20:13:24 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:26:13:32 | "gimme" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:36:13:58 | { root: ... cwd() } | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:41 | root | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:38:13:56 | root: process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:50 | process | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:54 | process.cwd | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | exceptional return of process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | InputAccessPathFromCallee | 1.root |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | assignedToPropName | root |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:44:13:56 | process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:13:52:13:54 | cwd | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:14 | res.sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | exceptional return of res.sen ... wd() }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:3:15:59 | res.sen ... wd() }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:7:15:14 | sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:18 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:24 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | exceptional return of req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:16:15:33 | req.param("gimme") | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:20:15:24 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:26:15:32 | "gimme" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:36:15:58 | { root: ... cwd() } | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:41 | root | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:38:15:56 | root: process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:50 | process | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:54 | process.cwd | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | exceptional return of process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | InputAccessPathFromCallee | 1.root |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | assignedToPropName | root |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:44:15:56 | process.cwd() | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:15:52:15:54 | cwd | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | exceptional return of res.sen ... ir") }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:3:18:61 | res.sen ... ir") }) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:7:18:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:18 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:24 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | exceptional return of req.param("file") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:16:18:32 | req.param("file") | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:20:18:24 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:26:18:31 | "file" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:35:18:60 | { root: ... dir") } | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:40 | root | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:37:18:58 | root: r ... ("dir") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:45 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:51 | req.param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | exceptional return of req.param("dir") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | InputAccessPathFromCallee | 1.root |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | assignedToPropName | root |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:43:18:58 | req.param("dir") | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:47:18:51 | param | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | CalleeFlexibleAccessPath | req.param |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:18:53:18:57 | "dir" | receiverName | req |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:13 | homeDir | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:7:20:33 | homeDir ... ve('.') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:20 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:28 | path.resolve | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | exceptional return of path.resolve('.') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:17:20:33 | path.resolve('.') | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:22:20:28 | resolve | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | CalleeFlexibleAccessPath | path.resolve |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:20:30:20:32 | '.' | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | exceptional return of res.sen ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:3:21:49 | res.sen ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:7:21:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:22 | homeDir | stringConcatenatedWith |  -endpoint- '/data/' + req.params.x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:33 | homeDir + '/data/' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:16:21:48 | homeDir ... arams.x | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:26:21:33 | '/data/' | stringConcatenatedWith | homeDir -endpoint- req.params.x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:39 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:46 | req.params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:37:21:48 | req.params.x | stringConcatenatedWith | homeDir + '/data/' -endpoint-  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:41:21:46 | params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:21:48:21:48 | x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:14 | res.sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | exceptional return of res.sen ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:3:22:38 | res.sen ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:7:22:14 | sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:22 | 'data/' | stringConcatenatedWith |  -endpoint- req.params.x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:16:22:37 | 'data/' ... arams.x | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:28 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:35 | req.params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:26:22:37 | req.params.x | stringConcatenatedWith | 'data/' -endpoint-  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:30:22:35 | params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:22:37:22:37 | x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | exceptional return of res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:3:24:50 | res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:7:24:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:19 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:27 | path.resolve | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | exceptional return of path.re ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:16:24:49 | path.re ... rams.x) | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:21:24:27 | resolve | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | CalleeFlexibleAccessPath | path.resolve |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:29:24:34 | 'data' | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:39 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:46 | req.params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | CalleeFlexibleAccessPath | path.resolve |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:37:24:48 | req.params.x | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:41:24:46 | params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:24:48:24:48 | x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:14 | res.sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | exceptional return of res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:3:25:47 | res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:7:25:14 | sendfile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:19 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:24 | path.join | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | exceptional return of path.jo ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | CalleeFlexibleAccessPath | res.sendfile |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:16:25:46 | path.jo ... rams.x) | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:21:25:24 | join | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | CalleeFlexibleAccessPath | path.join |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:26:25:31 | 'data' | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:36 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:43 | req.params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | CalleeFlexibleAccessPath | path.join |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:34:25:45 | req.params.x | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:38:25:43 | params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:25:45:25:45 | x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:5 | res | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:14 | res.sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | exceptional return of res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:3:27:57 | res.sen ... ams.x)) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:7:27:14 | sendFile | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:22 | homeDir | stringConcatenatedWith |  -endpoint- path.join() |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | CalleeFlexibleAccessPath | res.sendFile |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:16:27:56 | homeDir ... rams.x) | receiverName | res |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:29 | path | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:34 | path.join | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | exceptional return of path.jo ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:26:27:56 | path.jo ... rams.x) | stringConcatenatedWith | homeDir -endpoint-  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:31:27:34 | join | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | CalleeFlexibleAccessPath | path.join |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:36:27:41 | 'data' | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:46 | req | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:53 | req.params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | CalleeFlexibleAccessPath | path.join |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | calleeImports | path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:44:27:55 | req.params.x | receiverName | path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:48:27:53 | params | fileImports | express path |
| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | enclosingFunctionBody | req res res sendFile req param gimme res sendfile req param gimme res sendFile req param gimme root process cwd res sendfile req param gimme root process cwd res sendFile req param file root req param dir homeDir path resolve . res sendFile homeDir /data/ req params x res sendfile data/ req params x res sendFile path resolve data req params x res sendfile path join data req params x res sendFile homeDir path join data req params x |
| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/TaintedPath/tainted-sendFile.js:27:55:27:55 | x | fileImports | express path |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:0 | this | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | require | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:1:1:1 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:6 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:5:1:22 | fs = require('fs') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:16 | require | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:10:1:22 | require('fs') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:1:18:1:21 | 'fs' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:8 | http | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:5:2:26 | http =  ... 'http') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:18 | require | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | exceptional return of require('http') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:12:2:26 | require('http') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:2:20:2:25 | 'http' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:7 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:5:3:24 | url = require('url') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:17 | require | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | exceptional return of require('url') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:11:3:24 | require('url') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:3:19:3:23 | 'url' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:5:10 | server | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server  ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server  ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:5:29:2 | server  ... NCY]\\n}) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:17 | http | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:5:30 | http.createServer | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | exceptional return of http.cr ... NCY]\\n}) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:14:29:2 | http.cr ... NCY]\\n}) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:19:5:30 | createServer | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | this | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:5:31 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | 'arguments' object of anonymous function | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | exceptional return of anonymous function | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | calleeImports | http |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | functio ... ENCY]\\n} | receiverName | http |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:32:29:1 | return of anonymous function | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:41:5:43 | req | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:5:46:5:48 | res | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:10 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:7:6:48 | path =  ... ry.path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:16 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:22 | url.parse | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | exceptional return of url.par ... , true) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:37 | url.par ... , true) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:43 | url.par ... ).query | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:14:6:48 | url.par ... ry.path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:18:6:22 | parse | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:26 | req | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:24:6:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:28:6:30 | url | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:33:6:36 | true | receiverName | url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:39:6:43 | query | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:6:45:6:48 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | exceptional return of fs.read ... (i, j)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:2:7:38 | fs.read ... (i, j)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:5:7:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:31 | path.substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | exceptional return of path.substring(i, j) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:18:7:37 | path.substring(i, j) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:23:7:31 | substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:33:7:33 | i | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:7:36:7:36 | j | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | exceptional return of fs.read ... ing(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:2:8:35 | fs.read ... ing(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:5:8:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:31 | path.substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | exceptional return of path.substring(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:18:8:34 | path.substring(4) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:23:8:31 | substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:8:33:8:33 | 4 | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | exceptional return of fs.read ... (0, i)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:2:9:38 | fs.read ... (0, i)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:5:9:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:31 | path.substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | exceptional return of path.substring(0, i) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:18:9:37 | path.substring(0, i) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:23:9:31 | substring | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:33:9:33 | 0 | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | CalleeFlexibleAccessPath | path.substring |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:9:36:9:36 | i | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | exceptional return of fs.read ... str(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:2:10:32 | fs.read ... str(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:5:10:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:28 | path.substr | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | exceptional return of path.substr(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:18:10:31 | path.substr(4) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:23:10:28 | substr | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | CalleeFlexibleAccessPath | path.substr |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:10:30:10:30 | 4 | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | exceptional return of fs.read ... ice(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:2:11:31 | fs.read ... ice(4)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:5:11:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:27 | path.slice | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | exceptional return of path.slice(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:18:11:30 | path.slice(4) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:23:11:27 | slice | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | CalleeFlexibleAccessPath | path.slice |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:11:29:11:29 | 4 | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | exceptional return of fs.read ... known)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:2:13:38 | fs.read ... known)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:5:13:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:21 | path | stringConcatenatedWith |  -endpoint- unknown |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:28 | path.concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | exceptional return of path.concat(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:18:13:37 | path.concat(unknown) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:23:13:28 | concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | CalleeFlexibleAccessPath | path.concat |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:13:30:13:36 | unknown | stringConcatenatedWith | path -endpoint-  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | exceptional return of fs.read ... (path)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:2:14:38 | fs.read ... (path)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:5:14:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:24 | unknown | stringConcatenatedWith |  -endpoint- path |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:31 | unknown.concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | exceptional return of unknown.concat(path) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:18:14:37 | unknown.concat(path) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:26:14:31 | concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | CalleeFlexibleAccessPath | unknown.concat |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | receiverName | unknown |
| autogenerated/TaintedPath/tainted-string-steps.js:14:33:14:36 | path | stringConcatenatedWith | unknown -endpoint-  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ...  path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ...  path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ...  path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | exceptional return of fs.read ...  path)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ...  path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ...  path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ...  path)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ...  path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:2:15:47 | fs.read ...  path)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:5:15:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:24 | unknown | stringConcatenatedWith |  -endpoint- unknown + path |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:31 | unknown.concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | exceptional return of unknown ... , path) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:18:15:46 | unknown ... , path) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:26:15:31 | concat | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | CalleeFlexibleAccessPath | unknown.concat |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | receiverName | unknown |
| autogenerated/TaintedPath/tainted-string-steps.js:15:33:15:39 | unknown | stringConcatenatedWith | unknown -endpoint- path |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | CalleeFlexibleAccessPath | unknown.concat |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | receiverName | unknown |
| autogenerated/TaintedPath/tainted-string-steps.js:15:42:15:45 | path | stringConcatenatedWith | unknown + unknown -endpoint-  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | exceptional return of fs.read ... trim()) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:2:17:29 | fs.read ... trim()) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:5:17:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:26 | path.trim | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | exceptional return of path.trim() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:17:18:17:28 | path.trim() | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:17:23:17:26 | trim | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | exceptional return of fs.read ... Case()) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:2:18:36 | fs.read ... Case()) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:5:18:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:33 | path.toLowerCase | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | exceptional return of path.toLowerCase() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:18:18:18:35 | path.toLowerCase() | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:18:23:18:33 | toLowerCase | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | exceptional return of fs.read ... t('/')) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:2:20:33 | fs.read ... t('/')) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:5:20:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | exceptional return of path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:18:20:32 | path.split('/') | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:23:20:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:20:29:20:31 | '/' | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | exceptional return of fs.read ... /')[0]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:2:21:36 | fs.read ... /')[0]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:5:21:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | exceptional return of path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:32 | path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:18:21:35 | path.split('/')[0] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:23:21:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:21:29:21:31 | '/' | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:21:34:21:34 | 0 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | exceptional return of fs.read ... /')[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:2:22:36 | fs.read ... /')[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:5:22:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | exceptional return of path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:32 | path.split('/') | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:18:22:35 | path.split('/')[i] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:23:22:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:22:29:22:31 | '/' | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:22:34:22:34 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | exceptional return of fs.read ... //)[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:2:23:37 | fs.read ... //)[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:5:23:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | exceptional return of path.split(/\\//) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:33 | path.split(/\\//) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:18:23:36 | path.split(/\\//)[i] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:23:23:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:23:29:23:32 | /\\// | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:23:35:23:35 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | exceptional return of fs.read ... ?")[0]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:2:24:36 | fs.read ... ?")[0]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:5:24:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | exceptional return of path.split("?") | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:32 | path.split("?") | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:18:24:35 | path.split("?")[0] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:23:24:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:24:29:24:31 | "?" | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:24:34:24:34 | 0 | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | exceptional return of fs.read ... wn)[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:2:25:40 | fs.read ... wn)[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:5:25:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | exceptional return of path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:36 | path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:18:25:39 | path.sp ... own)[i] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:23:25:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:25:29:25:35 | unknown | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:25:38:25:38 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | exceptional return of fs.read ... atever) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:2:26:46 | fs.read ... atever) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:5:26:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | exceptional return of path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:36 | path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:18:26:45 | path.sp ... hatever | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:23:26:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:26:29:26:35 | unknown | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:26:38:26:45 | whatever | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | exceptional return of fs.read ... known)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:2:27:37 | fs.read ... known)) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:5:27:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | exceptional return of path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:18:27:36 | path.split(unknown) | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:23:27:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:27:29:27:35 | unknown | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:3 | fs | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:16 | fs.readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | exceptional return of fs.read ... ?")[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:2:28:36 | fs.read ... ?")[i]) | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:5:28:16 | readFileSync | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:21 | path | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:27 | path.split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | exceptional return of path.split("?") | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:32 | path.split("?") | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | calleeImports | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:18:28:35 | path.split("?")[i] | receiverName | fs |
| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:23:28:27 | split | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | CalleeFlexibleAccessPath | path.split |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | calleeImports | url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:28:29:28:31 | "?" | receiverName | path |
| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | enclosingFunctionBody | req res path url parse req url true query path fs readFileSync path substring i j fs readFileSync path substring 4 fs readFileSync path substring 0 i fs readFileSync path substr 4 fs readFileSync path slice 4 fs readFileSync path concat unknown fs readFileSync unknown concat path fs readFileSync unknown concat unknown path fs readFileSync path trim fs readFileSync path toLowerCase fs readFileSync path split / fs readFileSync path 0 split / 0 fs readFileSync path split / i fs readFileSync path split /\\// i fs readFileSync path 0 split ? 0 fs readFileSync path split unknown i fs readFileSync path split unknown whatever fs readFileSync path split unknown fs readFileSync path split ? i |
| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/tainted-string-steps.js:28:34:28:34 | i | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:6 | server | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:13 | server.listen | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | exceptional return of server.listen() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:1:31:15 | server.listen() | fileImports | fs http url |
| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/tainted-string-steps.js:31:8:31:13 | listen | fileImports | fs http url |
| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:1:1:0 | this | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | fs | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | parseTorrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:1:1:1 | require | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:7:1:18 | parseTorrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTo ... rrent') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:7:1:45 | parseTorrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:22:1:28 | require | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | exceptional return of require ... rrent') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:22:1:45 | require ... rrent') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | calleeImports |  |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:1:30:1:44 | 'parse-torrent' | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:7:2:8 | fs | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:7:2:24 | fs = require('fs') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:12:2:18 | require | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | exceptional return of require('fs') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:12:2:24 | require('fs') | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:2:20:2:23 | 'fs' | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | fs | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | parseTorrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:4:0 | this | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | 'arguments' object of function getTorrentData | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | exceptional return of function getTorrentData | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | functio ... OT OK\\n} | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:1:8:1 | return of function getTorrentData | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:10:4:23 | getTorrentData | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:25:4:27 | dir | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:4:30:4:36 | torrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:6:5:9 | name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name =  ... t).name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name =  ... t).name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name =  ... t).name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name =  ... t).name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:6:5:38 | name =  ... t).name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:13:5:24 | parseTorrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | exceptional return of parseTo ... orrent) | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:13:5:33 | parseTo ... orrent) | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:13:5:38 | parseTo ... t).name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | CalleeFlexibleAccessPath | parseTorrent |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | calleeImports | parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:26:5:32 | torrent | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:5:35:5:38 | name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:6:6:8 | loc | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:6:6:45 | loc = d ... t.data" | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:12:6:14 | dir | stringConcatenatedWith |  -endpoint- '/' + name + '.torrent.data' |
| autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:12:6:20 | dir + "/" | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:12:6:27 | dir + "/" + name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:12:6:45 | dir + " ... t.data" | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:18:6:20 | "/" | stringConcatenatedWith | dir -endpoint- name + '.torrent.data' |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:24:6:27 | name | stringConcatenatedWith | dir + '/' -endpoint- '.torrent.data' |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:6:31:6:45 | ".torrent.data" | stringConcatenatedWith | dir + '/' + name -endpoint-  |
| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:9:7:10 | fs | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:9:7:23 | fs.readFileSync | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | exceptional return of fs.readFileSync(loc) | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:9:7:28 | fs.readFileSync(loc) | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:12:7:23 | readFileSync | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | calleeImports | fs |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | contextFunctionInterfaces | getTorrentData(dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | contextSurroundingFunctionParameters | (dir, torrent) |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | enclosingFunctionBody | dir torrent name parseTorrent torrent name loc dir / name .torrent.data fs readFileSync loc |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | enclosingFunctionName | getTorrentData |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | fileImports | fs parse-torrent |
| autogenerated/TaintedPath/torrents.js:7:25:7:27 | loc | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:0 | this | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:1:1:1 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:6 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:5:1:22 | fs = require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:16 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | exceptional return of require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:10:1:22 | require('fs') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | calleeImports |  |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:1:18:1:21 | 'fs' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:8 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http =  ... 'http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:5:2:26 | http =  ... 'http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:18 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | exceptional return of require('http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:12:2:26 | require('http') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | calleeImports |  |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:2:20:2:25 | 'http' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:7 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:5:3:24 | url = require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:17 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | exceptional return of require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:11:3:24 | require('url') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | calleeImports |  |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:3:19:3:23 | 'url' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:5:4:12 | sanitize | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:5:4:43 | sanitiz ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:22 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | exceptional return of require ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:16:4:43 | require ... ename') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | calleeImports |  |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:4:24:4:42 | 'sanitize-filename' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:5:5:14 | pathModule | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:5:5:32 | pathMod ... 'path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:24 | require | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | exceptional return of require('path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:18:5:32 | require('path') | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | CalleeFlexibleAccessPath | require |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | calleeImports |  |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:5:26:5:31 | 'path' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:5:8:10 | server | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server  ... ted\\n\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server  ... ted\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:5:34:2 | server  ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:14:8:17 | http | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:14:8:30 | http.createServer | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | exceptional return of http.cr ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:14:34:2 | http.cr ... ted\\n\\n}) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:19:8:30 | createServer | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | this | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:8:31 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | 'arguments' object of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | exceptional return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | calleeImports | http |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | functio ... nted\\n\\n} | receiverName | http |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:32:34:1 | return of anonymous function | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:41:8:43 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:8:46:8:48 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:7:9:10 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path =  ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path =  ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path =  ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path =  ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:7:9:48 | path =  ... ry.path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:16 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:22 | url.parse | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | exceptional return of url.par ... , true) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:37 | url.par ... , true) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:43 | url.par ... ).query | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:14:9:48 | url.par ... ry.path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:18:9:22 | parse | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:24:9:26 | req | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | calleeImports | url |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:24:9:30 | req.url | receiverName | url |
| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:28:9:30 | url | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | InputArgumentIndex | 1 |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | calleeImports | url |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:33:9:36 | true | receiverName | url |
| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:39:9:43 | query | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:9:45:9:48 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:3:12:5 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:3:12:11 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | exceptional return of res.wri ... (path)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:3:12:34 | res.wri ... (path)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:7:12:11 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:13:12:14 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:13:12:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | exceptional return of fs.read ... c(path) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:13:12:33 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:16:12:27 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:12:29:12:32 | path | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:14:7:14:10 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:14:7:14:24 | path === 'foo.txt' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:14:16:14:24 | 'foo.txt' | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:5:15:7 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:5:15:13 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | exceptional return of res.wri ... (path)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:5:15:36 | res.wri ... (path)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:9:15:13 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:15:15:16 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:15:15:29 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | exceptional return of fs.read ... c(path) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:15:15:35 | fs.read ... c(path) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:18:15:29 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:15:31:15:34 | path | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:17:3:17:3 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:17:7:17:11 | path2 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:17:7:17:18 | path2 = path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:17:15:17:18 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:3:18:7 | path2 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:3:18:45 | path2 \| ... path2)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:13:18:15 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:13:18:21 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | exceptional return of res.wri ... path2)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:13:18:45 | res.wri ... path2)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:17:18:21 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:23:18:24 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:23:18:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | exceptional return of fs.read ... (path2) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:23:18:44 | fs.read ... (path2) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:26:18:37 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:18:39:18:43 | path2 | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:20:7:20:11 | path3 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:20:7:20:18 | path3 = path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:20:15:20:18 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:3:21:7 | path3 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:3:21:45 | path3 & ... path3)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:13:21:15 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:13:21:21 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | exceptional return of res.wri ... path3)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:13:21:45 | res.wri ... path3)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:17:21:21 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:23:21:24 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:23:21:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | exceptional return of fs.read ... (path3) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:23:21:44 | fs.read ... (path3) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:26:21:37 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:21:39:21:43 | path3 | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:23:7:23:11 | path4 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:23:7:23:18 | path4 = path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:23:15:23:18 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:3:24:7 | path4 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:3:24:45 | path4 ? ... path4)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:13:24:15 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:13:24:21 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | exceptional return of res.wri ... path4)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:13:24:45 | res.wri ... path4)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:17:24:21 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:23:24:24 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:23:24:37 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | exceptional return of fs.read ... (path4) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:23:24:44 | fs.read ... (path4) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:26:24:37 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:24:39:24:43 | path4 | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:26:7:26:11 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:26:7:26:18 | path5 = path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:26:15:26:18 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:27:3:27:7 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:27:3:27:19 | path5 &&= "clean" | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:27:13:27:19 | "clean" | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:3:28:3 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:3:28:5 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:3:28:11 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | exceptional return of res.wri ... path5)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:3:28:35 | res.wri ... path5)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:7:28:11 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:13:28:14 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:13:28:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | exceptional return of fs.read ... (path5) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:13:28:34 | fs.read ... (path5) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:16:28:27 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:28:29:28:33 | path5 | receiverName | fs |
| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:30:7:30:11 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:30:7:30:18 | path6 = path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:30:15:30:18 | path | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:31:3:31:7 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:31:3:31:19 | path6 \|\|= "clean" | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:31:13:31:19 | "clean" | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:3:32:3 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:3:32:5 | res | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:3:32:11 | res.write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | exceptional return of res.wri ... path6)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:3:32:35 | res.wri ... path6)) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:7:32:11 | write | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:13:32:14 | fs | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:13:32:27 | fs.readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | exceptional return of fs.read ... (path6) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | CalleeFlexibleAccessPath | res.write |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:13:32:34 | fs.read ... (path6) | receiverName | res |
| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:16:32:27 | readFileSync | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | CalleeFlexibleAccessPath | fs.readFileSync |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | calleeImports | fs |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | contextFunctionInterfaces |  |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | enclosingFunctionBody | req res path url parse req url true query path res write fs readFileSync path path foo.txt res write fs readFileSync path path2 path path2 res write fs readFileSync path2 path3 path path3 res write fs readFileSync path3 path4 path path4 res write fs readFileSync path4 path5 path path5 clean res write fs readFileSync path5 path6 path path6 clean res write fs readFileSync path6 |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | fileImports | fs http path sanitize-filename url |
| autogenerated/TaintedPath/typescript.ts:32:29:32:33 | path6 | receiverName | fs |
| autogenerated/TaintedPath/views.js:1:1:1:0 | this | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:1:1:0 | this | fileImports |  |
| autogenerated/TaintedPath/views.js:1:1:1:1 | module | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:1:1:1 | module | fileImports |  |
| autogenerated/TaintedPath/views.js:1:1:1:6 | module | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:1:1:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:1:1:6 | module | fileImports |  |
| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:1:1:14 | module.exports | fileImports |  |
| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:1:1:56 | module. ... ams[0]) | fileImports |  |
| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:8:1:14 | exports | fileImports |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:18:1:56 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | assignedToPropName | exports |
| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:18:1:56 | (req, r ... ams[0]) | fileImports |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:18:1:56 | exceptional return of anonymous function | fileImports |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:18:1:56 | return of anonymous function | fileImports |  |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | fileImports |  |
| autogenerated/TaintedPath/views.js:1:19:1:21 | req | fileImports |  |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | fileImports |  |
| autogenerated/TaintedPath/views.js:1:24:1:26 | res | fileImports |  |
| autogenerated/TaintedPath/views.js:1:32:1:34 | res | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:34 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:34 | res | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:32:1:34 | res | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:32:1:34 | res | fileImports |  |
| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:32:1:41 | res.render | fileImports |  |
| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:32:1:56 | exceptional return of res.ren ... ams[0]) | fileImports |  |
| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:32:1:56 | res.ren ... ams[0]) | fileImports |  |
| autogenerated/TaintedPath/views.js:1:36:1:41 | render | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:36:1:41 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:36:1:41 | render | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:36:1:41 | render | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:36:1:41 | render | fileImports |  |
| autogenerated/TaintedPath/views.js:1:43:1:45 | req | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:45 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:45 | req | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:43:1:45 | req | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:43:1:45 | req | fileImports |  |
| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:43:1:52 | req.params | fileImports |  |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | CalleeFlexibleAccessPath | res.render |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | InputArgumentIndex | 0 |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | fileImports |  |
| autogenerated/TaintedPath/views.js:1:43:1:55 | req.params[0] | receiverName | res |
| autogenerated/TaintedPath/views.js:1:47:1:52 | params | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:47:1:52 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:47:1:52 | params | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:47:1:52 | params | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:47:1:52 | params | fileImports |  |
| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | contextFunctionInterfaces | exports(req, res) |
| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | enclosingFunctionBody | req res res render req 0 params 0 |
| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | enclosingFunctionName | exports |
| autogenerated/TaintedPath/views.js:1:54:1:54 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:4 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:1:21 | this.ad ... istener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | exceptional return of this.ad ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:1:3:2 | this.ad ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:6:1:21 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | CalleeFlexibleAccessPath | this.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:23:1:31 | 'message' | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:1:33 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | this.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:34:3:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:1:43:1:47 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:12 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:18 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | documen ... t.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:5:2:30 | exceptional return of documen ... t.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:14:2:18 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:24 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:20:2:29 | event.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | contextSurroundingFunctionParameters | (event) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | enclosingFunctionBody | event document write event data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:2:26:2:29 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:4 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:5:21 | this.ad ... istener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | exceptional return of this.ad ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:1:7:2 | this.ad ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:6:5:21 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | CalleeFlexibleAccessPath | this.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:23:5:31 | 'message' | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:5:33 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | this.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:34:7:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:43:5:48 | {data} | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:5:44:5:47 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:12 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:18 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | document.write(data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:5:6:24 | exceptional return of document.write(data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:14:6:18 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | contextSurroundingFunctionParameters | (?) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | enclosingFunctionBody | data document write data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | enclosingFunctionName | addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:6:20:6:23 | data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:9:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ...     }\\n} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | functio ...     }\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:1:30:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:9:10:9:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:10:4 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | 'arguments' object of function foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | exceptional return of function foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n    } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n    } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n    } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | functio ... K\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:5:14:5 | return of function foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:14:10:16 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:18:10:18 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:21:10:25 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:10:28:10:28 | y | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:22 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | documen ... x.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:9:11:30 | exceptional return of documen ... x.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:18:11:22 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:24 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:24:11:29 | x.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:11:26:11:29 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:22 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | documen ... t.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:9:12:34 | exceptional return of documen ... t.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:18:12:22 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:28 | event | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:24:12:33 | event.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:12:30:12:33 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:22 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | documen ... y.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:9:13:30 | exceptional return of documen ... y.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:18:13:22 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:24 | y | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:24:13:29 | y.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | contextSurroundingFunctionParameters | (x, event, y) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:13:26:13:29 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:10 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:27 | window. ... istener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | exceptional return of window. ... ems'})) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:5:16:71 | window. ... ems'})) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:12:16:27 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | CalleeFlexibleAccessPath | window.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:29:16:37 | "message" | receiverName | window |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:42 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:47 | foo.bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | exceptional return of foo.bin ... tems'}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | CalleeFlexibleAccessPath | window.addEventListener |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:40:16:70 | foo.bin ... tems'}) | receiverName | window |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:44:16:47 | bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | CalleeFlexibleAccessPath | foo.bind |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:49:16:52 | null | receiverName | foo |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | CalleeFlexibleAccessPath | foo.bind |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:55:16:69 | {data: 'items'} | receiverName | foo |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:59 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:56:16:68 | data: 'items' | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | CalleeFlexibleAccessPath | foo.bind |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | InputAccessPathFromCallee | 1.data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | assignedToPropName | data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:16:62:16:68 | 'items' | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:10 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:18:20 | window.onmessage | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n    } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n    } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n    } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:5:23:5 | window. ... k\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:12:18:20 | onmessage | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:18:24 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | assignedToPropName | onmessage |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | e => {\\n ... k\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:18:24:23:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:13 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:20 | e.origin | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:13:19:45 | e.origi ... ar.com" | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:15:19:20 | origin | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:19:26:19:45 | "https://foobar.com" | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:22 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | documen ... e.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:9:22:30 | exceptional return of documen ... e.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:18:22:22 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:24 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:24:22:29 | e.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:22:26:22:29 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:10 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:25:20 | window.onmessage | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n    } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n    } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n    } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:5:29:5 | window. ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:12:25:20 | onmessage | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:25:24 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | assignedToPropName | onmessage |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | e => {\\n ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:25:24:29:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:17 | mySet | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:26 | mySet.includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | exceptional return of mySet.i ... origin) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:13:26:36 | mySet.i ... origin) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:19:26:26 | includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | CalleeFlexibleAccessPath | mySet.includes |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:28:26:35 | e.origin | receiverName | mySet |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:26:30:26:35 | origin | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:20 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:26 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | documen ... e.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:13:27:34 | exceptional return of documen ... e.data) | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:22:27:26 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | fileImports |  |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:28:27:33 | e.data | receiverName | document |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | contextFunctionInterfaces | foo(x, event, y)\nonmessage(e)\nonmessage(e)\ntest() |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | enclosingFunctionBody | foo x event y document write x data document write event data document write y data window addEventListener message foo bind null data items window onmessage e e origin https://foobar.com document write e data window onmessage e mySet includes e origin document write e data |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/addEventListener.js:27:30:27:33 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:0 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:1 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import  ... /core'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import  ... /core'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:1:1:81 | import  ... /core'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:10:1:18 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:21:1:26 | OnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:40 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:29:1:57 | DomSani ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:45:1:57 | DomSanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:1:66:1:80 | '@angular/core' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import  ... ommon'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import  ... ommon'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:1:2:42 | import  ... ommon'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:10:2:16 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:2:25:2:41 | '@angular/common' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import  ... outer'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import  ... outer'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:1:3:81 | import  ... outer'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:10:3:23 | ActivatedRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:26:3:47 | Activat ... napshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:50:3:55 | Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:3:64:3:80 | '@angular/router' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import  ... owser'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import  ... owser'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:1:4:57 | import  ... owser'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:10:4:21 | DomSanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:4:30:4:56 | '@angul ... rowser' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:1:10:2 | @Compon ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:6:10 | Component | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | Compone ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:6:2:10:2 | exceptional return of Compone ... ss']\\n}) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:10 | selector | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:3:7:22 | selector: 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | CalleeFlexibleAccessPath | Component |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | InputAccessPathFromCallee | 0.selector |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | assignedToPropName | selector |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | calleeImports | @angular/core |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:7:13:7:22 | 'app-root' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:13 | templateUrl | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:3:8:37 | templat ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | CalleeFlexibleAccessPath | Component |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | InputAccessPathFromCallee | 0.templateUrl |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | assignedToPropName | templateUrl |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | calleeImports | @angular/core |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:8:16:8:37 | './app. ... t.html' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:11 | styleUrls | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:3:9:36 | styleUr ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | CalleeFlexibleAccessPath | Component |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | InputAccessPathFromCallee | 0.styleUrls |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | assignedToPropName | styleUrls |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | calleeImports | @angular/core |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:14:9:36 | ['./app ... t.css'] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:9:15:9:35 | './app. ... nt.css' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n  }\\n} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:8:46:1 | class A ... K\\n  }\\n} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:11:14:11:25 | AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:7 | title | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:3:12:19 | title = 'my-app'; | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | assignedToPropName | title |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:12:11:12:18 | 'my-app' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:14:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | 'arguments' object of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | constru ... \\n  ) {} | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | exceptional return of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:14:3:19:6 | return of constructor of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:5:15:33 | private ... edRoute | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | assignedToPropName | route |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:15:13:15:17 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:5:16:35 | private ... nitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | assignedToPropName | sanitizer |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:16:13:16:21 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:5:17:26 | private ...  Router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | assignedToPropName | router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:17:13:17:18 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:5:18:37 | private ... itizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | assignedToPropName | sanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | contextSurroundingFunctionParameters | (route, sanitizer, router, sanitizer2) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | enclosingFunctionBody | route ActivatedRoute sanitizer DomSanitizer router Router sanitizer2 DomSanitizer2 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:18:13:18:22 | sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | \u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:21:10 | ngOnInit | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | 'arguments' object of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | exceptional return of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | assignedToPropName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | ngOnIni ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:21:3:41:3 | return of method ngOnInit of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | exceptional return of this.sa ... ).href) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:5:22:72 | this.sa ... ).href) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:10:22:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:20:22:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:50 | \\u0275getDOM | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | \\u0275getDOM() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:52 | exceptional return of \\u0275getDOM() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:64 | \\u0275getDOM ... ocation | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | \\u0275getDOM ... ation() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:66 | exceptional return of \\u0275getDOM ... ation() | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:44:22:71 | \\u0275getDOM ... ().href | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:54:22:64 | getLocation | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:22:68:22:71 | href | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | exceptional return of this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:5:24:74 | this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:10:24:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:20:24:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:69 | this.ro ... .params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:44:24:73 | this.ro ... ams.foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:49:24:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:55:24:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:64:24:69 | params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:24:71:24:73 | foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | exceptional return of this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:5:25:79 | this.sa ... ms.foo) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:10:25:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:20:25:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:74 | this.ro ... yParams | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:44:25:78 | this.ro ... ams.foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:49:25:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:55:25:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:64:25:74 | queryParams | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:25:76:25:78 | foo | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | exceptional return of this.sa ... agment) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:5:26:72 | this.sa ... agment) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:10:26:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:20:26:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:44:26:71 | this.ro ... ragment | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:49:26:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:55:26:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:26:64:26:71 | fragment | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:5:27:83 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:10:27:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:20:27:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:71 | this.ro ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:75 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | exceptional return of this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:44:27:82 | this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:49:27:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:55:27:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:64:27:71 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:73:27:75 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | CalleeFlexibleAccessPath | this.route.snapshot.paramMap.get |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:27:77:27:81 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:5:28:88 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:10:28:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:20:28:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:76 | this.ro ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:80 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | exceptional return of this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:44:28:87 | this.ro ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:49:28:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:55:28:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:64:28:76 | queryParamMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:78:28:80 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | CalleeFlexibleAccessPath | this.route.snapshot.queryParamMap.get |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:28:82:28:86 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:14 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:23 | this.route.paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:29:33 | this.ro ... bscribe | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n    }) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n    }) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n    }) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | exceptional return of this.ro ... \\n    }) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n    }) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n    }) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n    }) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:5:31:6 | this.ro ... \\n    }) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:10:29:14 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:16:29:23 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:25:29:33 | subscribe | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:29:37 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | 'arguments' object of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | exceptional return of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | CalleeFlexibleAccessPath | this.route.paramMap.subscribe |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | map =>  ... K\\n    } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:29:35:31:5 | return of anonymous function | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:10 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:20 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:44 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:7:30:60 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:12:30:20 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:22:30:44 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:48 | map | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:52 | map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | exceptional return of map.get('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:46:30:59 | map.get('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:50:30:52 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | CalleeFlexibleAccessPath | map.get |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | contextSurroundingFunctionParameters | ()\n(map) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:30:54:30:58 | 'foo' | receiverName | map |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | exceptional return of this.sa ... ].path) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:5:33:75 | this.sa ... ].path) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:10:33:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:20:33:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:44:33:74 | this.ro ... 1].path | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:49:33:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:55:33:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:64:33:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:68:33:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:33:71:33:74 | path | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | exceptional return of this.sa ... ters.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:5:34:83 | this.sa ... ters.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:10:34:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:20:34:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:80 | this.ro ... ameters | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:44:34:82 | this.ro ... eters.x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:49:34:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:55:34:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:64:34:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:68:34:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:71:34:80 | parameters | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:34:82:34:82 | x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | exceptional return of this.sa ... t('x')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:5:35:92 | this.sa ... t('x')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:10:35:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:20:35:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:82 | this.ro ... eterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:86 | this.ro ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | exceptional return of this.ro ... et('x') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:44:35:91 | this.ro ... et('x') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:49:35:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:55:35:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:64:35:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:68:35:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:71:35:82 | parameterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:84:35:86 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | CalleeFlexibleAccessPath | this.route.snapshot.url.1.parameterMap.get |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:35:88:35:90 | 'x' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | exceptional return of this.sa ... rams.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:5:36:92 | this.sa ... rams.x) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:10:36:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:20:36:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:53 | this.route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:62 | this.route.snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:66 | this.ro ... hot.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:69 | this.ro ... .url[1] | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:82 | this.ro ... eterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:89 | this.ro ... .params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:44:36:91 | this.ro ... arams.x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:49:36:53 | route | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:55:36:62 | snapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:64:36:66 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:68:36:68 | 1 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:71:36:82 | parameterMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:84:36:89 | params | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:36:91:36:91 | x | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | exceptional return of this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:5:38:59 | this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:10:38:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:20:38:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:47 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:54 | this.router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:44:38:58 | this.router.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:49:38:54 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:38:56:38:58 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:19 | this.sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:43 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | exceptional return of this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:5:40:60 | this.sa ... er.url) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:10:40:19 | sanitizer2 | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:21:40:43 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:48 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:55 | this.router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | CalleeFlexibleAccessPath | this.sanitizer2.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:45:40:59 | this.router.url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:50:40:55 | router | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | enclosingFunctionBody | sanitizer bypassSecurityTrustHtml \u0275getDOM getLocation href sanitizer bypassSecurityTrustHtml route snapshot params foo sanitizer bypassSecurityTrustHtml route snapshot queryParams foo sanitizer bypassSecurityTrustHtml route snapshot fragment sanitizer bypassSecurityTrustHtml route snapshot paramMap get foo sanitizer bypassSecurityTrustHtml route snapshot queryParamMap get foo route paramMap subscribe map sanitizer bypassSecurityTrustHtml map get foo sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 path sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameters x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap get x sanitizer bypassSecurityTrustHtml 1 route snapshot url 1 parameterMap params x sanitizer bypassSecurityTrustHtml router url sanitizer2 bypassSecurityTrustHtml router url |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | enclosingFunctionName | ngOnInit |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:40:57:40:59 | url | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:2 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:43:12 | someMethod | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | 'arguments' object of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | exceptional return of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | return of method someMethod of class AppComponent | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | assignedToPropName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:3:45:3 | someMet ...  OK\\n  } | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:43:14:43:26 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:8 | this | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:18 | this.sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:42 | this.sa ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | exceptional return of this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:5:44:77 | this.sa ... 'foo')) | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:10:44:18 | sanitizer | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:20:44:42 | bypassS ... ustHtml | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:56 | routeSnapshot | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:65 | routeSn ... aramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:69 | routeSn ... Map.get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | exceptional return of routeSn ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | CalleeFlexibleAccessPath | this.sanitizer.bypassSecurityTrustHtml |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:44:44:76 | routeSn ... ('foo') | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:58:44:65 | paramMap | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:67:44:69 | get | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | CalleeFlexibleAccessPath | routeSnapshot.paramMap.get |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | contextFunctionInterfaces | constructor(route, sanitizer, router, sanitizer2)\nngOnInit()\nsomeMethod(routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | contextSurroundingFunctionParameters | (routeSnapshot) |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | enclosingFunctionBody | routeSnapshot ActivatedRouteSnapshot sanitizer bypassSecurityTrustHtml routeSnapshot paramMap get foo |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | enclosingFunctionName | someMethod |
| autogenerated/Xss/DomBasedXss/angular2-client.ts:44:71:44:75 | 'foo' | fileImports | @angular/common @angular/core @angular/platform-browser @angular/router |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:0 | this | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:1 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import  ... names'; | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import  ... names'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:1:1:36 | import  ... names'; | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:8:1:17 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:1:24:1:35 | 'classnames' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import  ... edupe'; | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import  ... edupe'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:1:2:44 | import  ... edupe'; | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:2:8:2:18 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:2:25:2:43 | 'classnames/dedupe' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import  ... /bind'; | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import  ... /bind'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:1:3:42 | import  ... /bind'; | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:3:8:3:18 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:3:25:3:41 | 'classnames/bind' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import  ... 'clsx'; | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import  ... 'clsx'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:1:4:24 | import  ... 'clsx'; | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:4:8:4:11 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:4:18:4:23 | 'clsx' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:6:0 | this | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | 'arguments' object of function main | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | exceptional return of function main | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | functio ... OT OK\\n} | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:6:1:18:1 | return of function main | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:6:10:6:13 | main | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:5:7:84 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:14:7:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:19:7:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:31:7:84 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:32:7:44 | <span class=" | stringConcatenatedWith |  -endpoint- classNames() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:56 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | classNa ... w.name) | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:47:7:69 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:63 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | CalleeFlexibleAccessPath | classNames |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:58:7:68 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:65:7:68 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:7:71:7:83 | ">Hello<span> | stringConcatenatedWith | '<span class="' + classNames() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:5:8:85 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:14:8:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:19:8:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:31:8:85 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:32:8:44 | <span class=" | stringConcatenatedWith |  -endpoint- classNamesD() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:57 | classNamesD | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | classNa ... w.name) | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:47:8:70 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:64 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | CalleeFlexibleAccessPath | classNamesD |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | calleeImports | classnames/dedupe |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:59:8:69 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:66:8:69 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:8:72:8:84 | ">Hello<span> | stringConcatenatedWith | '<span class="' + classNamesD() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:5:9:85 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:14:9:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:19:9:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:31:9:85 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:32:9:44 | <span class=" | stringConcatenatedWith |  -endpoint- classNamesB() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:57 | classNamesB | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | classNa ... w.name) | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:47:9:70 | exceptional return of classNa ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:64 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | CalleeFlexibleAccessPath | classNamesB |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | calleeImports | classnames/bind |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:59:9:69 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:66:9:69 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:9:72:9:84 | ">Hello<span> | stringConcatenatedWith | '<span class="' + classNamesB() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:19 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeS ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:9:10:57 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:32 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:37 | classNames.bind | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | classNa ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:23:10:57 | exceptional return of classNa ... .name}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:34:10:37 | bind | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | CalleeFlexibleAccessPath | classNames.bind |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:39:10:56 | {foo: window.name} | receiverName | classNames |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:42 | foo | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:40:10:55 | foo: window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:50 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | CalleeFlexibleAccessPath | classNames.bind |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | InputAccessPathFromCallee | 0.foo |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | assignedToPropName | foo |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:45:10:55 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:10:52:10:55 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:5:11:79 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:14:11:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:19:11:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:31:11:79 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:32:11:44 | <span class=" | stringConcatenatedWith |  -endpoint- unsafeStyle() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:57 | unsafeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | exceptional return of unsafeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:47:11:64 | unsafeStyle('foo') | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | CalleeFlexibleAccessPath | unsafeStyle |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:59:11:63 | 'foo' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:11:66:11:78 | ">Hello<span> | stringConcatenatedWith | '<span class="' + unsafeStyle() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:17 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeSty ... ind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:9:12:39 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:30 | classNames | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:35 | classNames.bind | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | classNames.bind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:21:12:39 | exceptional return of classNames.bind({}) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:32:12:35 | bind | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | CalleeFlexibleAccessPath | classNames.bind |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:12:37:12:38 | {} | receiverName | classNames |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:5:13:83 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:14:13:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:19:13:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:31:13:83 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:32:13:44 | <span class=" | stringConcatenatedWith |  -endpoint- safeStyle() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:55 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | exceptional return of safeSty ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:47:13:68 | safeSty ... w.name) | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:62 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | CalleeFlexibleAccessPath | safeStyle |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:57:13:67 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:64:13:67 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:13:70:13:82 | ">Hello<span> | stringConcatenatedWith | '<span class="' + safeStyle() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:5:14:77 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:14:14:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:19:14:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:31:14:77 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:32:14:44 | <span class=" | stringConcatenatedWith |  -endpoint- safeStyle() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:55 | safeStyle | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | exceptional return of safeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:47:14:62 | safeStyle('foo') | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | CalleeFlexibleAccessPath | safeStyle |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | calleeImports | classnames |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:57:14:61 | 'foo' | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:14:64:14:76 | ">Hello<span> | stringConcatenatedWith | '<span class="' + safeStyle() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:5:15:78 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:14:15:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:19:15:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:31:15:78 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:32:15:44 | <span class=" | stringConcatenatedWith |  -endpoint- clsx() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:50 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | clsx(window.name) | stringConcatenatedWith | '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:47:15:63 | exceptional return of clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:57 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | CalleeFlexibleAccessPath | clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | calleeImports | clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:52:15:62 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:59:15:62 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:15:65:15:77 | ">Hello<span> | stringConcatenatedWith | '<span class="' + clsx() -endpoint-  |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:12 | document | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:17 | document.body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:27 | documen ... nerHTML | stringConcatenatedWith |  -endpoint- '<span class="' + clsx() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:5:17:79 | documen ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:14:17:17 | body | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:19:17:27 | innerHTML | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `<span  ... <span>` | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `<span  ... <span>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `<span  ... <span>` | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `<span  ... <span>` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:32:17:79 | `<span  ... <span>` | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:33:17:45 | <span class=" | stringConcatenatedWith | document.body.innerHTML -endpoint- clsx() + '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:51 | clsx | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | clsx(window.name) | stringConcatenatedWith | document.body.innerHTML + '<span class="' -endpoint- '">Hello<span>' |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:48:17:64 | exceptional return of clsx(window.name) | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:58 | window | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | CalleeFlexibleAccessPath | clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | calleeImports | clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:53:17:63 | window.name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:60:17:63 | name | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | contextFunctionInterfaces | main() |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | enclosingFunctionBody | document body innerHTML <span class=" classNames window name ">Hello<span> document body innerHTML <span class=" classNamesD window name ">Hello<span> document body innerHTML <span class=" classNamesB window name ">Hello<span> unsafeStyle classNames bind foo window name document body innerHTML <span class=" unsafeStyle foo ">Hello<span> safeStyle classNames bind document body innerHTML <span class=" safeStyle window name ">Hello<span> document body innerHTML <span class=" safeStyle foo ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> document body innerHTML <span class=" clsx window name ">Hello<span> |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | fileImports | classnames classnames/bind classnames/dedupe clsx |
| autogenerated/Xss/DomBasedXss/classnames.js:17:66:17:78 | ">Hello<span> | stringConcatenatedWith | document.body.innerHTML + '<span class="' + clsx() -endpoint-  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:0 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:1 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:1 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | exceptional return of $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:9 | exceptional return of $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:12 | $("#foo").on | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:12 | $("#foo").on | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:12 | $("#foo").on | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | $("#foo ...  paste) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | $("#foo ...  paste) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | $("#foo ...  paste) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | exceptional return of $("#foo ...  paste) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | exceptional return of $("#foo ...  paste) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:1:1:28 | exceptional return of $("#foo ...  paste) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:3:1:8 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:3:1:8 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:3:1:8 | "#foo" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:3:1:8 | "#foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:3:1:8 | "#foo" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:11:1:12 | on | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:11:1:12 | on | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:11:1:12 | on | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:14:1:20 | "paste" | CalleeFlexibleAccessPath | $().on |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:14:1:20 | "paste" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:14:1:20 | "paste" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:14:1:20 | "paste" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:14:1:20 | "paste" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:23:1:27 | paste | CalleeFlexibleAccessPath | $().on |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:23:1:27 | paste | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:23:1:27 | paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:23:1:27 | paste | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:1:23:1:27 | paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:3:0 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:3:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:3:0 | this | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:3:0 | this | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:3:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | 'arguments' object of function paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | 'arguments' object of function paste | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | 'arguments' object of function paste | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | 'arguments' object of function paste | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | 'arguments' object of function paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | exceptional return of function paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | exceptional return of function paste | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | exceptional return of function paste | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | exceptional return of function paste | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | exceptional return of function paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | functio ... div);\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | functio ... div);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | functio ... div);\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | return of function paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | return of function paste | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | return of function paste | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | return of function paste | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:1:20:1 | return of function paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:10:3:14 | paste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:3:16:3:16 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:27 | { clipboardData } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:27 | { clipboardData } | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:27 | { clipboardData } | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:27 | { clipboardData } | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:27 | { clipboardData } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | { clipb ... alEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | { clipb ... alEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | { clipb ... alEvent | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | { clipb ... alEvent | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:11:4:45 | { clipb ... alEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:13:4:25 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:31 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:31 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:31 | e | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:31 | e | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:31 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:45 | e.originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:45 | e.originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:45 | e.originalEvent | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:45 | e.originalEvent | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:31:4:45 | e.originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:33:4:45 | originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:33:4:45 | originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:33:4:45 | originalEvent | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:33:4:45 | originalEvent | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:4:33:4:45 | originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:9:5:22 | !clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:9:5:22 | !clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:9:5:22 | !clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:9:5:22 | !clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:9:5:22 | !clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:5:10:5:22 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:14 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:14 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:14 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:14 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:14 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text =  ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text =  ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text =  ... plain') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text =  ... plain') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:11:7:52 | text =  ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:30 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:30 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:30 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:30 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:30 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:38 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:38 | clipboa ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:38 | clipboa ... getData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:38 | clipboa ... getData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:38 | clipboa ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | clipboa ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | clipboa ... plain') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | clipboa ... plain') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | clipboa ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | exceptional return of clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | exceptional return of clipboa ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | exceptional return of clipboa ... plain') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | exceptional return of clipboa ... plain') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:18:7:52 | exceptional return of clipboa ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:32:7:38 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:32:7:38 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:32:7:38 | getData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:32:7:38 | getData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:32:7:38 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | CalleeFlexibleAccessPath | clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:7:40:7:51 | 'text/plain' | receiverName | clipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:14 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:14 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:14 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:14 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:14 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html =  ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html =  ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html =  ... /html') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html =  ... /html') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:11:8:51 | html =  ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:30 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:30 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:30 | clipboardData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:30 | clipboardData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:30 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:38 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:38 | clipboa ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:38 | clipboa ... getData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:38 | clipboa ... getData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:38 | clipboa ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | clipboa ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | clipboa ... /html') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | clipboa ... /html') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | clipboa ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | exceptional return of clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | exceptional return of clipboa ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | exceptional return of clipboa ... /html') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | exceptional return of clipboa ... /html') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:18:8:51 | exceptional return of clipboa ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:32:8:38 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:32:8:38 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:32:8:38 | getData | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:32:8:38 | getData | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:32:8:38 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | CalleeFlexibleAccessPath | clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:8:40:8:50 | 'text/html' | receiverName | clipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:13 | !text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:13 | !text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:13 | !text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:13 | !text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:13 | !text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:22 | !text && !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:22 | !text && !html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:22 | !text && !html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:22 | !text && !html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:9:9:22 | !text && !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:18:9:22 | !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:18:9:22 | !html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:18:9:22 | !html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:18:9:22 | !html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:18:9:22 | !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:9:19:9:22 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | e | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | e | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:5 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:20 | e.preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:20 | e.preventDefault | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:20 | e.preventDefault | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:20 | e.preventDefault | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:20 | e.preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | e.preventDefault() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:5:11:22 | exceptional return of e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:7:11:20 | preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:7:11:20 | preventDefault | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:7:11:20 | preventDefault | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:7:11:20 | preventDefault | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:11:7:11:20 | preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:13 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:13 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:13 | div | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:13 | div | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:13 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div = d ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div = d ... ('div') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:11:13:45 | div = d ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:24 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:24 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:24 | document | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:24 | document | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:38 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:38 | documen ... Element | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:38 | documen ... Element | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:38 | documen ... Element | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:38 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | documen ... ('div') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:17:13:45 | exceptional return of documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:26:13:38 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:26:13:38 | createElement | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:26:13:38 | createElement | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:26:13:38 | createElement | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:26:13:38 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:13:40:13:44 | 'div' | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:14:9:14:12 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:11 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:11 | div | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:11 | div | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:21 | div.innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:21 | div.innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:21 | div.innerHTML | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:21 | div.innerHTML | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:21 | div.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:28 | div.innerHTML = html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:28 | div.innerHTML = html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:9:15:28 | div.innerHTML = html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:13:15:21 | innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:13:15:21 | innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:13:15:21 | innerHTML | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:13:15:21 | innerHTML | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:13:15:21 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:15:25:15:28 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:11 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:11 | div | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:11 | div | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:23 | div.textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:23 | div.textContent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:23 | div.textContent | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:23 | div.textContent | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:23 | div.textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:30 | div.tex ...  = text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:30 | div.tex ...  = text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:30 | div.tex ...  = text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:30 | div.tex ...  = text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:9:17:30 | div.tex ...  = text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:13:17:23 | textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:13:17:23 | textContent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:13:17:23 | textContent | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:13:17:23 | textContent | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:13:17:23 | textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | assignedToPropName | textContent |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:17:27:17:30 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:12 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:12 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:12 | document | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:12 | document | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:12 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:17 | document.body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:17 | document.body | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:17 | document.body | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:17 | document.body | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:17 | document.body | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:24 | document.body.append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:24 | document.body.append | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:24 | document.body.append | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:24 | document.body.append | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:24 | document.body.append | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | documen ... nd(div) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:5:19:29 | exceptional return of documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:14:19:17 | body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:14:19:17 | body | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:14:19:17 | body | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:14:19:17 | body | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:14:19:17 | body | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:19:19:24 | append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:19:19:24 | append | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:19:19:24 | append | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:19:19:24 | append | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:19:19:24 | append | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | CalleeFlexibleAccessPath | document.body.append |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | enclosingFunctionBody | e clipboardData e originalEvent clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | enclosingFunctionName | paste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:19:26:19:28 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:22:7 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:22:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:22:7 | this | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:22:7 | this | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:22:7 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | 'arguments' object of function install | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | 'arguments' object of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | 'arguments' object of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | exceptional return of function install | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | exceptional return of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | exceptional return of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | functio ...    })\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | functio ...    })\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | functio ...    })\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | return of function install | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | return of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | return of function install | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | return of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:8:26:1 | return of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:17:22:23 | install | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:17:22:23 | install | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:17:22:23 | install | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:22:25:22:26 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:6 | el | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:6 | el | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:6 | el | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:6 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:6 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:23 | el.addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:23 | el.addEventListener | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:23 | el.addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:23 | el.addEventListener | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:23:23 | el.addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | el.addE ... \\n    }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | el.addE ... \\n    }) | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | el.addE ... \\n    }) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | el.addE ... \\n    }) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | el.addE ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:8:23:23 | addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:8:23:23 | addEventListener | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:8:23:23 | addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:8:23:23 | addEventListener | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:8:23:23 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | CalleeFlexibleAccessPath | el.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:25:23:31 | 'paste' | receiverName | el |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | 'arguments' object of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | 'arguments' object of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | CalleeFlexibleAccessPath | el.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | (e) =>  ...  \\n    } | receiverName | el |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:34:25:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:23:35:23:35 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:9 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:16 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:21 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:9:24:59 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:11:24:15 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:18:24:21 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:23 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:37 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:45 | e.clipb ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:23:24:58 | exceptional return of e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:25:24:37 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:39:24:45 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | enclosingFunctionBody | el HTMLElement el addEventListener paste e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/clipboard.ts:24:47:24:57 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:28:25 | documen ... istener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | documen ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:10:28:25 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | CalleeFlexibleAccessPath | document.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:27:28:33 | 'paste' | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | CalleeFlexibleAccessPath | document.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | (e) =>  ... OT OK\\n} | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:36:30:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:28:37:28:37 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:12 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:17 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:5:29:55 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:7:29:11 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:14:29:17 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:19 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:33 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:41 | e.clipb ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:19:29:54 | exceptional return of e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:21:29:33 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:35:29:41 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | enclosingFunctionBody | e $ #id html e clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:29:43:29:53 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:1 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:9 | exceptional return of $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:32:14 | $("#foo").bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | $("#foo ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:3:32:8 | "#foo" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:11:32:14 | bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | CalleeFlexibleAccessPath | $().bind |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:16:32:22 | 'paste' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) =>  ... OT OK\\n} | CalleeFlexibleAccessPath | $().bind |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) =>  ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) =>  ... OT OK\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) =>  ... OT OK\\n} | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | (e) =>  ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:25:34:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:32:26:32:26 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:12 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:17 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:5:33:69 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:7:33:11 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:14:33:17 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:19 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:33 | e.originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:47 | e.origi ... ardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:55 | e.origi ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | e.origi ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:19:33:68 | exceptional return of e.origi ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:21:33:33 | originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:35:33:47 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:49:33:55 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | CalleeFlexibleAccessPath | e.originalEvent.clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | enclosingFunctionBody | e $ #id html e originalEvent clipboardData getData text/html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/clipboard.ts:33:57:33:67 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ...    }\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:2 | (functi ...    }\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ...  }\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | (functi ...  }\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:36:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ...     }\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | functio ...     }\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:36:2:56:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:9:37:43 | div = d ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:22 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:36 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:15:37:43 | exceptional return of documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:24:37:36 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:37:38:37:42 | "div" | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:7 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:38:15 | div.onpaste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n    } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n    } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:5:55:5 | div.onp ... ;\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:9:38:15 | onpaste | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:38:18 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | assignedToPropName | onpaste |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | functio ... ;\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:19:55:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:38:29:38:29 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:31 | { clipboardData } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:15:39:35 | { clipb ... a } = e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:17:39:29 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:39:35:39:35 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:13:40:26 | !clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:40:14:40:26 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:18 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text =  ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text =  ... plain') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text =  ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text =  ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:15:42:56 | text =  ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:34 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:42 | clipboa ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | clipboa ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:22:42:56 | exceptional return of clipboa ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:36:42:42 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | CalleeFlexibleAccessPath | clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:42:44:42:55 | 'text/plain' | receiverName | clipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html =  ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html =  ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html =  ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html =  ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:15:43:55 | html =  ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:34 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:42 | clipboa ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | clipboa ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:22:43:55 | exceptional return of clipboa ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:36:43:42 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | CalleeFlexibleAccessPath | clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:43:44:43:54 | 'text/html' | receiverName | clipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:17 | !text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:13:44:26 | !text && !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:22:44:26 | !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:44:23:44:26 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:9 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:24 | e.preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:9:46:26 | exceptional return of e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:46:11:46:24 | preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:17 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:15:48:49 | div = d ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:28 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:42 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:21:48:49 | exceptional return of documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:30:48:42 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:48:44:48:48 | 'div' | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:49:13:49:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:15 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:25 | div.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:13:50:32 | div.innerHTML = html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:17:50:25 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:50:29:50:32 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:15 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:27 | div.textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ...  = text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ...  = text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ...  = text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ...  = text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:13:52:34 | div.tex ...  = text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:17:52:27 | textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | assignedToPropName | textContent |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:52:31:52:34 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:21 | document.body | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:28 | document.body.append | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:9:54:33 | exceptional return of documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:18:54:21 | body | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:23:54:28 | append | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | CalleeFlexibleAccessPath | document.body.append |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | enclosingFunctionBody | div document createElement div div onpaste e ClipboardEvent clipboardData e clipboardData text clipboardData getData text/plain html clipboardData getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:54:30:54:32 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:58:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | 'arguments' object of function getClipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n  } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | async f ... ms;\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | exceptional return of function getClipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:1:89:3 | return of function getClipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:16:58:31 | getClipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:58:33:58:33 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:19 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropIte ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:11:60:46 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | exceptional return of new Set ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:23:60:46 | new Set ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:60:27:60:29 | Set | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:23 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:29 | e.clipb ... a.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:36 | e.clipb ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:9:63:40 | e.clipb ... gth > 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:11:63:23 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:25:63:29 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:31:63:36 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:63:40:63:40 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:16 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:16:65:20 | i = 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:20:65:20 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:23 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:23:65:54 | i < e.c ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:27 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:41 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:47 | e.clipb ... a.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:27:65:54 | e.clipb ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:29:65:41 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:43:65:47 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:49:65:54 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:57 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:65:57:65:59 | i++ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:18 | file | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file =  ... iles[i] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file =  ... iles[i] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file =  ... iles[i] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file =  ... iles[i] | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:15:66:45 | file =  ... iles[i] | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:22 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:36 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:42 | e.clipb ... a.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:22:66:45 | e.clipb ... iles[i] | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:24:66:36 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:38:66:42 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:66:44:66:44 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:23 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:29 | e.clipb ... a.types | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:38 | e.clipb ... ncludes | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:9:70:51 | exceptional return of e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:11:70:23 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:25:70:29 | types | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:31:70:38 | includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.types.includes |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:70:40:70:50 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:23 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | dropped ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:13:71:62 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:27 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:41 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:49 | e.clipb ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:27:71:62 | exceptional return of e.clipb ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:29:71:41 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:43:71:49 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | CalleeFlexibleAccessPath | e.clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:71:51:71:61 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:21 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | contain ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:13:72:54 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:32 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:46 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | documen ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:25:72:54 | exceptional return of documen ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:34:72:46 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:72:48:72:53 | 'html' | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:15 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:25 | container.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:7:73:39 | contain ... pedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:17:73:25 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:73:29:73:39 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:16 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs =  ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs =  ... ('img') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs =  ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs =  ... ('img') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:13:74:56 | imgs =  ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:28 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:49 | contain ... TagName | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | contain ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:20:74:56 | exceptional return of contain ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:30:74:49 | getElementsByTagName | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | CalleeFlexibleAccessPath | container.getElementsByTagName |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:74:51:74:55 | 'img' | receiverName | container |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:14 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:21 | imgs.length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:11:75:27 | imgs.length === 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:16:75:21 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:75:27:75:27 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:17 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:15:76:31 | src = imgs[0].src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:24 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:27 | imgs[0] | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:21:76:31 | imgs[0].src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:26:76:26 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:76:29:76:31 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:17 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:21 | dropItems.add | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | dropItems.add(src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:9:77:26 | exceptional return of dropItems.add(src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:19:77:21 | add | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | CalleeFlexibleAccessPath | dropItems.add |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:77:23:77:25 | src | receiverName | dropItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:16 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:30 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:36 | e.clipb ... a.types | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:45 | e.clipb ... ncludes | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | e.clipb ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:16:79:59 | exceptional return of e.clipb ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:18:79:30 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:32:79:36 | types | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:38:79:45 | includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | CalleeFlexibleAccessPath | e.clipboardData.types.includes |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:79:47:79:58 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:21 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainTe ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:13:80:61 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:25 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:39 | e.clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:47 | e.clipb ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | e.clipb ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:25:80:61 | exceptional return of e.clipb ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:27:80:39 | clipboardData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:41:80:47 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | CalleeFlexibleAccessPath | e.clipboardData.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:80:49:80:60 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:25 | /^https?:\\/\\//i | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:30 | /^https?:\\/\\//i.test | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | /^https ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:11:82:41 | exceptional return of /^https ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:27:82:30 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:82:32:82:40 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:17 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:21 | dropItems.add | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | dropIte ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:9:83:32 | exceptional return of dropIte ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:19:83:21 | add | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | CalleeFlexibleAccessPath | dropItems.add |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:83:23:83:31 | plainText | receiverName | dropItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:20 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageIt ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:11:87:44 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:28 | Array | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:33 | Array.from | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | Array.f ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:30:87:33 | from | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | CalleeFlexibleAccessPath | Array.from |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:87:35:87:43 | dropItems | receiverName | Array |
| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | enclosingFunctionBody | e ClipboardEvent Promise Array File dropItems Set File e clipboardData files length 0 i 0 i e clipboardData files length i file e clipboardData files i e clipboardData types includes text/html droppedHtml e clipboardData getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e clipboardData types includes text/plain plainText e clipboardData getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | enclosingFunctionName | getClipboardData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:88:12:88:21 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ...  });\\n}) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:2 | (functi ...  });\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:1:101:4 | exceptional return of (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:92:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ...   });\\n} | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | functio ...   });\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:92:2:101:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:9:93:43 | div = d ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:22 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:36 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:15:93:43 | exceptional return of documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:24:93:36 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:93:38:93:42 | "div" | receiverName | document |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:7 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:94:24 | div.addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n    }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n    }) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n    }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | div.add ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n    }) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n    }) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n    }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:5:100:6 | exceptional return of div.add ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:9:94:24 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | CalleeFlexibleAccessPath | div.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:26:94:38 | "beforeinput" | receiverName | div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:94:40 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | div.addEventListener |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | functio ... K\\n    } | receiverName | div |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:41:100:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:94:51:94:51 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:60 | { data, ... nsfer } | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:15:95:64 | { data, ... r } = e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:17:95:20 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:23:95:31 | inputType | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:34:95:44 | isComposing | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:47:95:58 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:95:64:95:64 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:13:96:25 | !dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:96:14:96:25 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html =  ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html =  ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html =  ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html =  ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:15:98:54 | html =  ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:33 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:41 | dataTransfer.getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:22:98:54 | exceptional return of dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:35:98:41 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:98:43:98:53 | 'text/html' | receiverName | dataTransfer |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:9 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:16 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:21 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | $("#id").html(html) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:9:99:27 | exceptional return of $("#id").html(html) | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:11:99:15 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:18:99:21 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | contextFunctionInterfaces | getClipboardData(e)\ninstall(el)\nonpaste(e)\npaste(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | enclosingFunctionBody | div document createElement div div addEventListener beforeinput e InputEvent data inputType isComposing dataTransfer e dataTransfer html dataTransfer getData text/html $ #id html html |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/clipboard.ts:99:23:99:26 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:1:1:0 | this | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:8:1:17 | * as dummy | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:13:1:17 | dummy | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:1:24:1:30 | 'dummy' | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ...     }\\n} | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:1:7:1 | class C ...     }\\n} | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:7:3:15 | CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:25:3:35 | HTMLElement | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | 'arguments' object of default constructor of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | (...arg ... rgs); } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | ...args | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | args | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constru ... rgs); } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | constructor | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of default constructor of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | exceptional return of super(...args) | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | return of default constructor of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | super(...args) | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/custom-element.js:3:37:3:36 | this | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:4:8 | test | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:5:6:5 | test()  ... K\\n    } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:4:8 | this | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | 'arguments' object of method test of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n   ... K\\n    } | assignedToPropName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n   ... K\\n    } | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n   ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | () {\\n   ... K\\n    } | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | exceptional return of method test of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:4:9:6:5 | return of method test of class CustomElm | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:12 | this | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:22 | this.innerHTML | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:9:5:36 | this.in ... ow.name | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:14:5:22 | innerHTML | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:31 | window | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:26:5:36 | window.name | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | contextFunctionInterfaces | constructor(args)\ntest() |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | enclosingFunctionBody | innerHTML window name |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/custom-element.js:5:33:5:36 | name | fileImports | dummy |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:0 | this | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | d3 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:1:1:1 | require | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:8 | d3 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:7:1:24 | d3 = require('d3') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:18 | require | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | exceptional return of require('d3') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:12:1:24 | require('d3') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:1:20:1:23 | 'd3' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:3:0 | this | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | 'arguments' object of function getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | exceptional return of function getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | functio ... name;\\n} | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:3:1:5:1 | return of function getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:3:10:3:17 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:17 | window | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:4:12:4:22 | window.name | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | enclosingFunctionBody | window name |
| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | enclosingFunctionName | getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:4:19:4:22 | name | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | d3 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:7:0 | this | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | 'arguments' object of function doSomething | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | exceptional return of function doSomething | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | functio ... OT OK\\n} | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:7:1:15:1 | return of function doSomething | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:7:10:7:20 | doSomething | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:6 | d3 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:13 | d3.select | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | d3.select('#main') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:8:22 | exceptional return of d3.select('#main') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ...   .attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ...   .attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ...   .attr | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ...   .attr | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:13 | d3.sele ...   .attr | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | d3.sele ... ', 100) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:9:27 | exceptional return of d3.sele ... ', 100) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ...  .style | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ...  .style | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ...  .style | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ...  .style | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:14 | d3.sele ...  .style | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ...  'red') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ...  'red') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ...  'red') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ...  'red') | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | d3.sele ...  'red') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ...  'red') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ...  'red') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ...  'red') | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ...  'red') | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:10:30 | exceptional return of d3.sele ...  'red') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ...   .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ...   .html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ...   .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ...   .html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:13 | d3.sele ...   .html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:11:25 | exceptional return of d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ...   .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ...   .html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ...   .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ...   .html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:13 | d3.sele ...   .html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:12:30 | exceptional return of d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ...   .call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ...   .call | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ...   .call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ...   .call | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:13 | d3.sele ...   .call | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | d3.sele ... nction) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | exceptional return of d3.sele ... nction) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:13:28 | reflective call | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ...   .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ...   .html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ...   .html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ...   .html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:13 | d3.sele ...   .html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:5:14:30 | exceptional return of d3.sele ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:8:8:13 | select | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | CalleeFlexibleAccessPath | d3.select |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:8:15:8:21 | '#main' | receiverName | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:9:10:9:13 | attr | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | CalleeFlexibleAccessPath | d3.select().attr |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:9:15:9:21 | 'width' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | CalleeFlexibleAccessPath | d3.select().attr |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:9:24:9:26 | 100 | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:10:10:10:14 | style | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | CalleeFlexibleAccessPath | d3.select().attr().style |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:10:16:10:22 | 'color' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | CalleeFlexibleAccessPath | d3.select().attr().style |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:10:25:10:29 | 'red' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:11:10:11:13 | html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:22 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | exceptional return of getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:11:15:11:24 | getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:10:12:13 | html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:14 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:15 | d | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | 'arguments' object of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html().html |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | d => getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | exceptional return of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:15:12:29 | return of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:27 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | exceptional return of getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:12:20:12:29 | getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:13:10:13:13 | call | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | CalleeFlexibleAccessPath | d3.select().attr().style().html().html().call |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:13:15:13:27 | otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:10:14:13 | html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:14 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:15 | d | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | 'arguments' object of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | CalleeFlexibleAccessPath | d3.select().attr().style().html().html().call().html |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | calleeImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | d => getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | exceptional return of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:15:14:29 | return of anonymous function | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:27 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | exceptional return of getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | contextSurroundingFunctionParameters | ()\n(d) |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | enclosingFunctionBody | d3 select #main attr width 100 style color red html getTaint html d getTaint call otherFunction html d getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | enclosingFunctionName | doSomething |
| autogenerated/Xss/DomBasedXss/d3.js:14:20:14:29 | getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:18:0 | this | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | 'arguments' object of function otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | exceptional return of function otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | functio ... OT OK\\n} | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:1:22:1 | return of function otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:10:18:22 | otherFunction | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:18:24:18:32 | selection | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:19:13 | selection | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ...   .attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ...   .attr | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ...   .attr | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ...   .attr | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:13 | selecti ...   .attr | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ...  'bar') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ...  'bar') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ...  'bar') | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ...  'bar') | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | exceptional return of selecti ...  'bar') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ...  'bar') | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ...  'bar') | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ...  'bar') | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ...  'bar') | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:20:27 | selecti ...  'bar') | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ...   .html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ...   .html | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ...   .html | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ...   .html | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:13 | selecti ...   .html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | exceptional return of selecti ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:19:5:21:25 | selecti ... aint()) | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:20:10:20:13 | attr | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | CalleeFlexibleAccessPath | selection.attr |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:20:15:20:19 | 'foo' | receiverName | selection |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | CalleeFlexibleAccessPath | selection.attr |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:20:22:20:26 | 'bar' | receiverName | selection |
| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:21:10:21:13 | html | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:22 | getTaint | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | exceptional return of getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | CalleeFlexibleAccessPath | selection.attr().html |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | contextFunctionInterfaces | doSomething()\ngetTaint()\notherFunction(selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | contextSurroundingFunctionParameters | (selection) |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | enclosingFunctionBody | selection selection attr foo bar html getTaint |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | enclosingFunctionName | otherFunction |
| autogenerated/Xss/DomBasedXss/d3.js:21:15:21:24 | getTaint() | fileImports | d3 |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:1 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import  ... e-fns'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import  ... e-fns'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:1:1:31 | import  ... e-fns'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:8:1:14 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:1:21:1:30 | 'date-fns' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import  ... ns/fp'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import  ... ns/fp'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:1:2:36 | import  ... ns/fp'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:2:8:2:16 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:2:23:2:35 | 'date-fns/fp' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import  ... s/esm'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import  ... s/esm'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:1:3:38 | import  ... s/esm'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:3:8:3:17 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:3:24:3:37 | 'date-fns/esm' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import  ... oment'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import  ... oment'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:1:4:28 | import  ... oment'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:4:8:4:13 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:4:20:4:27 | 'moment' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import  ... ormat'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import  ... ormat'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:1:5:36 | import  ... ormat'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:5:8:5:17 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:5:24:5:35 | 'dateformat' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:7:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | 'arguments' object of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | exceptional return of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:7:1:22:1 | return of function main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:7:10:7:13 | main | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:12 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:9:8:25 | time = new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | exceptional return of new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:16:8:25 | new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:8:20:8:23 | Date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:9:9:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:17:9:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:36:9:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:43:9:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:52:9:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:57:9:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:9:67:9:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:5:11:70 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:14:11:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:19:11:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:31:11:70 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:32:11:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFns.format() |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:55 | dateFns.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | dateFns ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:42:11:68 | exceptional return of dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:50:11:55 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | CalleeFlexibleAccessPath | dateFns.format |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | calleeImports | date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:57:11:60 | time | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | CalleeFlexibleAccessPath | dateFns.format |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | calleeImports | date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:11:63:11:67 | taint | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:5:12:73 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:14:12:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:19:12:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:31:12:73 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:32:12:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFnsEsm.format() |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:51 | dateFnsEsm | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:58 | dateFnsEsm.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | dateFns ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:42:12:71 | exceptional return of dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:53:12:58 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | CalleeFlexibleAccessPath | dateFnsEsm.format |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | calleeImports | date-fns/esm |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:60:12:63 | time | receiverName | dateFnsEsm |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | CalleeFlexibleAccessPath | dateFnsEsm.format |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | calleeImports | date-fns/esm |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:12:66:12:70 | taint | receiverName | dateFnsEsm |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:5:13:72 | documen ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:14:13:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:19:13:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:31:13:72 | `Time i ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:32:13:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFnsFp.format()() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:50 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:57 | dateFnsFp.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:64 | exceptional return of dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | dateFns ... )(time) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:42:13:70 | exceptional return of dateFns ... )(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:52:13:57 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | CalleeFlexibleAccessPath | dateFnsFp.format |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | calleeImports | date-fns/fp |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:13:59:13:63 | taint | receiverName | dateFnsFp |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | CalleeFlexibleAccessPath | dateFnsFp.format() |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | calleeImports | date-fns/fp |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:13:66:13:69 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:5:14:70 | documen ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:14:14:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:19:14:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:31:14:70 | `Time i ... time)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:32:14:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFns.format() |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:55 | dateFns.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | dateFns ... , time) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:42:14:68 | exceptional return of dateFns ... , time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:50:14:55 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | CalleeFlexibleAccessPath | dateFns.format |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | calleeImports | date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:57:14:61 | taint | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | CalleeFlexibleAccessPath | dateFns.format |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | calleeImports | date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:14:64:14:67 | time | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:5:15:72 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:14:15:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:19:15:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:31:15:72 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:32:15:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFnsFp.format()() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:50 | dateFnsFp | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:57 | dateFnsFp.format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | dateFns ... t(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:63 | exceptional return of dateFns ... t(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | dateFns ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:42:15:70 | exceptional return of dateFns ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:52:15:57 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | CalleeFlexibleAccessPath | dateFnsFp.format |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | calleeImports | date-fns/fp |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:15:59:15:62 | time | receiverName | dateFnsFp |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | CalleeFlexibleAccessPath | dateFnsFp.format() |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | calleeImports | date-fns/fp |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:15:65:15:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:5:16:69 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:14:16:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:19:16:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:31:16:69 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:32:16:39 | Time is  | stringConcatenatedWith |  -endpoint- moment().format() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | exceptional return of moment(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:53 | moment(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:60 | moment(time).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | exceptional return of moment( ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:42:16:67 | moment( ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | CalleeFlexibleAccessPath | moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | calleeImports | moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:49:16:52 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:55:16:60 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | CalleeFlexibleAccessPath | moment().format |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | calleeImports | moment |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:16:62:16:66 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:5:17:65 | documen ... mat()}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:14:17:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:19:17:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:31:17:65 | `Time i ... mat()}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:32:17:39 | Time is  | stringConcatenatedWith |  -endpoint- moment().format() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | exceptional return of moment(taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:54 | moment(taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:61 | moment(taint).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | exceptional return of moment( ... ormat() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:42:17:63 | moment( ... ormat() | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | CalleeFlexibleAccessPath | moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | calleeImports | moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:49:17:53 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:17:56:17:61 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:5:18:66 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:14:18:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:19:18:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:31:18:66 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:32:18:39 | Time is  | stringConcatenatedWith |  -endpoint- dateformat() |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:51 | dateformat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | datefor ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ...  taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ...  taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:42:18:64 | exceptional return of datefor ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | CalleeFlexibleAccessPath | dateformat |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | calleeImports | dateformat |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:53:18:56 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | CalleeFlexibleAccessPath | dateformat |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | calleeImports | dateformat |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:18:59:18:63 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import  ... dayjs'; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import  ... dayjs'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import  ... dayjs'; | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import  ... dayjs'; | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:20:5:20:30 | import  ... dayjs'; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:20:12:20:16 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:20:23:20:29 | 'dayjs' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:5:21:68 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:14:21:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:19:21:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:31:21:68 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:32:21:39 | Time is  | stringConcatenatedWith |  -endpoint- dayjs().format() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | dayjs(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:52 | exceptional return of dayjs(time) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:59 | dayjs(time).format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | dayjs(t ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:42:21:66 | exceptional return of dayjs(t ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | CalleeFlexibleAccessPath | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | calleeImports | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:48:21:51 | time | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:54:21:59 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | CalleeFlexibleAccessPath | dayjs().format |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | calleeImports | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | enclosingFunctionBody | time Date taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  dateFns format time taint document body innerHTML Time is  dateFnsEsm format time taint document body innerHTML Time is  dateFnsFp format taint time document body innerHTML Time is  dateFns format taint time document body innerHTML Time is  dateFnsFp format time taint document body innerHTML Time is  moment time format taint document body innerHTML Time is  moment taint format document body innerHTML Time is  dateformat time taint dayjs dayjs document body innerHTML Time is  dayjs time format taint |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | enclosingFunctionName | main |
| autogenerated/Xss/DomBasedXss/dates.js:21:61:21:65 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import  ... luxon"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import  ... luxon"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:1:24:42 | import  ... luxon"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:24:8:24:19 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:24:26:24:41 | "@date-io/luxon" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import  ... e-fns"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import  ... e-fns"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:1:25:47 | import  ... e-fns"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:25:8:25:21 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:25:28:25:46 | "@date-io/date-fns" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import  ... oment"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import  ... oment"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:1:26:44 | import  ... oment"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:26:8:26:20 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:26:27:26:43 | "@date-io/moment" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import  ... /dayjs" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import  ... /dayjs" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:1:27:41 | import  ... /dayjs" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:27:8:27:19 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:27:26:27:41 | "@date-io/dayjs" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:29:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | 'arguments' object of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | exceptional return of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:29:1:41:1 | return of function dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:29:10:29:15 | dateio | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:9:30:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:17:30:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:36:30:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:43:30:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:52:30:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:57:30:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:30:67:30:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:17 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:11:32:40 | dateFns ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | exceptional return of new DateFnsAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:21:32:40 | new DateFnsAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:32:25:32:38 | DateFnsAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:15 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:11:33:36 | luxon = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | exceptional return of new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:19:33:36 | new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:33:23:33:34 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:16 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment  ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment  ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment  ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment  ... apter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:11:34:38 | moment  ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | exceptional return of new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:20:34:38 | new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:34:24:34:36 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:15 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:11:35:36 | dayjs = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | exceptional return of new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:19:35:36 | new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:35:23:35:34 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:5:37:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:14:37:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:19:37:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:31:37:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:32:37:39 | Time is  | stringConcatenatedWith |  -endpoint- dateFns.formatByString() |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:48 | dateFns | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:63 | dateFns ... yString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | dateFns ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:42:37:82 | exceptional return of dateFns ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:50:37:63 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | exceptional return of new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | CalleeFlexibleAccessPath | dateFns.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | calleeImports | @date-io/date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:65:37:74 | new Date() | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:69:37:72 | Date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | CalleeFlexibleAccessPath | dateFns.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | calleeImports | @date-io/date-fns |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:37:77:37:81 | taint | receiverName | dateFns |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:5:38:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:14:38:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:19:38:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:31:38:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:32:38:39 | Time is  | stringConcatenatedWith |  -endpoint- luxon.formatByString() |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:46 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:61 | luxon.formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | exceptional return of luxon.f ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:42:38:82 | luxon.f ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:48:38:61 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:67 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:72 | luxon.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | exceptional return of luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | CalleeFlexibleAccessPath | luxon.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | calleeImports | @date-io/luxon |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:63:38:74 | luxon.date() | receiverName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:69:38:72 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | CalleeFlexibleAccessPath | luxon.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | calleeImports | @date-io/luxon |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:38:77:38:81 | taint | receiverName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:5:39:86 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:14:39:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:19:39:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:31:39:86 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:32:39:39 | Time is  | stringConcatenatedWith |  -endpoint- moment.formatByString() |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:62 | moment. ... yString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | exceptional return of moment. ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:42:39:84 | moment. ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:49:39:62 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:69 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:74 | moment.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | exceptional return of moment.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | CalleeFlexibleAccessPath | moment.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:64:39:76 | moment.date() | receiverName | moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:71:39:74 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | CalleeFlexibleAccessPath | moment.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:39:79:39:83 | taint | receiverName | moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:5:40:84 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:14:40:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:19:40:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:31:40:84 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:32:40:39 | Time is  | stringConcatenatedWith |  -endpoint- dayjs.formatByString() |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:61 | dayjs.formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | dayjs.f ...  taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ...  taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ...  taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ...  taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ...  taint) | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:42:40:82 | exceptional return of dayjs.f ...  taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:48:40:61 | formatByString | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:67 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:72 | dayjs.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | CalleeFlexibleAccessPath | dayjs.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | calleeImports | @date-io/dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | dayjs.date() | receiverName | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:63:40:74 | exceptional return of dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:69:40:72 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | CalleeFlexibleAccessPath | dayjs.formatByString |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | calleeImports | @date-io/dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 dateFns DateFnsAdapter luxon LuxonAdapter moment MomentAdapter dayjs DayJSAdapter document body innerHTML Time is  dateFns formatByString Date taint document body innerHTML Time is  luxon formatByString luxon date taint document body innerHTML Time is  moment formatByString moment date taint document body innerHTML Time is  dayjs formatByString dayjs date taint |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | enclosingFunctionName | dateio |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:40:77:40:81 | taint | receiverName | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import  ... luxon"; | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import  ... luxon"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:1:43:33 | import  ... luxon"; | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:43:10:43:17 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:43:26:43:32 | "luxon" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:45:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | 'arguments' object of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | exceptional return of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:45:1:51:1 | return of function luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:45:10:45:14 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:9:46:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:17:46:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:36:46:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:43:46:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:52:46:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:57:46:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:46:67:46:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:5:48:90 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:14:48:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:19:48:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:31:48:90 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:32:48:39 | Time is  | stringConcatenatedWith |  -endpoint- DateTime.now().plus().toFormat() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:49 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:53 | DateTime.now | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | DateTime.now() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:55 | exceptional return of DateTime.now() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:60 | DateTime.now().plus | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | DateTim ... rs: 1}) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:72 | exceptional return of DateTim ... rs: 1}) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:81 | DateTim ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | DateTim ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:42:48:88 | exceptional return of DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:51:48:53 | now | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:57:48:60 | plus | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | CalleeFlexibleAccessPath | DateTime.now().plus |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:62:48:71 | {years: 1} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:67 | years | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:63:48:70 | years: 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | CalleeFlexibleAccessPath | DateTime.now().plus |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | InputAccessPathFromCallee | 0.years |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | assignedToPropName | years |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:70:48:70 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:74:48:81 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | CalleeFlexibleAccessPath | DateTime.now().plus().toFormat |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:48:83:48:87 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:5:49:89 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:14:49:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:19:49:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:31:49:89 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:32:49:39 | Time is  | stringConcatenatedWith |  -endpoint- DateTime().setLocale().toFormat() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | exceptional return of new DateTime() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:55 | new DateTime() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:65 | new Dat ... tLocale | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | exceptional return of new Dat ... e('fr') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:71 | new Dat ... e('fr') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:80 | new Dat ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | exceptional return of new Dat ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:42:49:87 | new Dat ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:46:49:53 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:57:49:65 | setLocale | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | CalleeFlexibleAccessPath | DateTime().setLocale |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:67:49:70 | 'fr' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:73:49:80 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | CalleeFlexibleAccessPath | DateTime().setLocale().toFormat |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:49:82:49:86 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:5:50:104 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:14:50:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:19:50:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:31:50:104 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:32:50:39 | Time is  | stringConcatenatedWith |  -endpoint- DateTime.fromISO().startOf().toFormat() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:49 | DateTime | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:57 | DateTime.fromISO | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | DateTim ... 01-01") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:71 | exceptional return of DateTim ... 01-01") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:79 | DateTim ... startOf | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | DateTim ... ('day') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:86 | exceptional return of DateTim ... ('day') | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:95 | DateTim ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | DateTim ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:42:50:102 | exceptional return of DateTim ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:51:50:57 | fromISO | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | CalleeFlexibleAccessPath | DateTime.fromISO |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:59:50:70 | "2020-01-01" | receiverName | DateTime |
| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:73:50:79 | startOf | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | CalleeFlexibleAccessPath | DateTime.fromISO().startOf |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:81:50:85 | 'day' | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:88:50:95 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | CalleeFlexibleAccessPath | DateTime.fromISO().startOf().toFormat |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | calleeImports | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 document body innerHTML Time is  DateTime now plus years 1 toFormat taint document body innerHTML Time is  DateTime setLocale fr toFormat taint document body innerHTML Time is  DateTime fromISO 2020-01-01 startOf day toFormat taint |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | enclosingFunctionName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:50:97:50:101 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:53:0 | this | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | 'arguments' object of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | exceptional return of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | functio ... OT OK\\n} | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:53:1:62:1 | return of function dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:53:10:53:16 | dateio2 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:13 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:9:54:69 | taint = ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:34 | decodeURIComponent | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:17:54:69 | exceptional return of decodeU ... ing(1)) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:41 | window | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:50 | window.location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:55 | window.location.hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:65 | window. ... bstring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | exceptional return of window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:36:54:68 | window. ... ring(1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:43:54:50 | location | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:52:54:55 | hash | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:57:54:65 | substring | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | CalleeFlexibleAccessPath | window.location.hash.substring |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:54:67:54:67 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:16 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment  ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment  ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment  ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment  ... apter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:11:56:38 | moment  ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | exceptional return of new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:20:56:38 | new MomentAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:56:24:56:36 | MomentAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:5:57:101 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:14:57:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:19:57:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:31:57:101 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:32:57:39 | Time is  | stringConcatenatedWith |  -endpoint- moment.addDays().format() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:47 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:55 | moment.addDays | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | exceptional return of moment. ... 1"), 1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:85 | moment. ... 1"), 1) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:92 | moment. ... .format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | exceptional return of moment. ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:42:57:99 | moment. ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:49:57:55 | addDays | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:62 | moment | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:67 | moment.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | exceptional return of moment. ... 06-21") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | CalleeFlexibleAccessPath | moment.addDays |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:57:57:81 | moment. ... 06-21") | receiverName | moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:64:57:67 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | CalleeFlexibleAccessPath | moment.date |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:69:57:80 | "2020-06-21" | receiverName | moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | CalleeFlexibleAccessPath | moment.addDays |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:84:57:84 | 1 | receiverName | moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:87:57:92 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | CalleeFlexibleAccessPath | moment.addDays().format |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | calleeImports | @date-io/moment |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:57:94:57:98 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:15 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:11:58:36 | luxon = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | exceptional return of new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:19:58:36 | new LuxonAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:58:23:58:34 | LuxonAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:5:59:87 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:14:59:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:19:59:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:31:59:87 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:32:59:39 | Time is  | stringConcatenatedWith |  -endpoint- luxon.endOfDay().toFormat() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:46 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:55 | luxon.endOfDay | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | exceptional return of luxon.e ... date()) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:69 | luxon.e ... date()) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:78 | luxon.e ... oFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | exceptional return of luxon.e ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:42:59:85 | luxon.e ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:48:59:55 | endOfDay | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:61 | luxon | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:66 | luxon.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | exceptional return of luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | CalleeFlexibleAccessPath | luxon.endOfDay |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | calleeImports | @date-io/luxon |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:57:59:68 | luxon.date() | receiverName | luxon |
| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:63:59:66 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:71:59:78 | toFormat | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | CalleeFlexibleAccessPath | luxon.endOfDay().toFormat |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | calleeImports | @date-io/luxon |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:59:80:59:84 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:15 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:11:60:36 | dayjs = ... apter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | exceptional return of new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:19:60:36 | new DayJSAdapter() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:60:23:60:34 | DayJSAdapter | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:12 | document | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:17 | document.body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:27 | documen ... nerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:5:61:88 | documen ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:14:61:17 | body | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:19:61:27 | innerHTML | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:31:61:88 | `Time i ... aint)}` | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:32:61:39 | Time is  | stringConcatenatedWith |  -endpoint- dayjs.setHours().format() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:46 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:55 | dayjs.setHours | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | dayjs.s ... e(), 4) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:72 | exceptional return of dayjs.s ... e(), 4) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:79 | dayjs.s ... .format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | dayjs.s ... (taint) | stringConcatenatedWith | 'Time is ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:42:61:86 | exceptional return of dayjs.s ... (taint) | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:48:61:55 | setHours | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:61 | dayjs | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:66 | dayjs.date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | CalleeFlexibleAccessPath | dayjs.setHours |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | calleeImports | @date-io/dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | dayjs.date() | receiverName | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:57:61:68 | exceptional return of dayjs.date() | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:63:61:66 | date | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | CalleeFlexibleAccessPath | dayjs.setHours |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | calleeImports | @date-io/dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:71:61:71 | 4 | receiverName | dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:74:61:79 | format | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | CalleeFlexibleAccessPath | dayjs.setHours().format |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | calleeImports | @date-io/dayjs |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | contextFunctionInterfaces | dateio()\ndateio2()\nluxon()\nmain() |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | enclosingFunctionBody | taint decodeURIComponent window location hash substring 1 moment MomentAdapter document body innerHTML Time is  moment addDays moment date 2020-06-21 1 format taint luxon LuxonAdapter document body innerHTML Time is  luxon endOfDay luxon date toFormat taint dayjs DayJSAdapter document body innerHTML Time is  dayjs setHours dayjs date 4 format taint |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | enclosingFunctionName | dateio2 |
| autogenerated/Xss/DomBasedXss/dates.js:61:81:61:85 | taint | fileImports | @date-io/date-fns @date-io/dayjs @date-io/luxon @date-io/moment date-fns date-fns/esm date-fns/fp dateformat dayjs luxon moment |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:1 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:9 | exceptional return of $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:12 | $("#foo").on | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | $("#foo ... , drop) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:1:1:26 | exceptional return of $("#foo ... , drop) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:3:1:8 | "#foo" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:11:1:12 | on | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | CalleeFlexibleAccessPath | $().on |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:14:1:19 | "drop" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | CalleeFlexibleAccessPath | $().on |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:1:22:1:25 | drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:3:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | 'arguments' object of function drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | exceptional return of function drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | functio ... div);\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:1:20:1 | return of function drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:10:3:13 | drop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:3:15:3:15 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:26 | { dataTransfer } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:11:4:44 | { dataT ... alEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:13:4:24 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:30 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:30:4:44 | e.originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:4:32:4:44 | originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:9:5:21 | !dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:5:10:5:21 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:14 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text =  ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text =  ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text =  ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text =  ... plain') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:11:7:51 | text =  ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:29 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:37 | dataTransfer.getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | dataTra ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:18:7:51 | exceptional return of dataTra ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:31:7:37 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | CalleeFlexibleAccessPath | dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:7:39:7:50 | 'text/plain' | receiverName | dataTransfer |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:14 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html =  ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html =  ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html =  ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html =  ... /html') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:11:8:50 | html =  ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:29 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:37 | dataTransfer.getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:18:8:50 | exceptional return of dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:31:8:37 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:8:39:8:49 | 'text/html' | receiverName | dataTransfer |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:13 | !text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:9:9:22 | !text && !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:10:9:13 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:18:9:22 | !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:9:19:9:22 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:5 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:20 | e.preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:5:11:22 | exceptional return of e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:11:7:11:20 | preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:13 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:11:13:45 | div = d ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:38 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:17:13:45 | exceptional return of documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:26:13:38 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:13:40:13:44 | 'div' | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:14:9:14:12 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:21 | div.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:9:15:28 | div.innerHTML = html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:13:15:21 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:15:25:15:28 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:23 | div.textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ...  = text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ...  = text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ...  = text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ...  = text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:9:17:30 | div.tex ...  = text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:13:17:23 | textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | assignedToPropName | textContent |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:17:27:17:30 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:12 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:17 | document.body | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:24 | document.body.append | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:5:19:29 | exceptional return of documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:14:19:17 | body | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:19:19:24 | append | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | CalleeFlexibleAccessPath | document.body.append |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | enclosingFunctionBody | e dataTransfer e originalEvent dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | enclosingFunctionName | drop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:19:26:19:28 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:22:7 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | 'arguments' object of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | exceptional return of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ...    })\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ...    })\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | functio ...    })\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:8:26:1 | return of function install | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:17:22:23 | install | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:22:25:22:26 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:6 | el | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:23:23 | el.addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n    }) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n    }) | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n    }) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n    }) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | el.addE ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:5:25:6 | exceptional return of el.addE ... \\n    }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:8:23:23 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | CalleeFlexibleAccessPath | el.addEventListener |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | contextSurroundingFunctionParameters | (el) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:25:23:30 | 'drop' | receiverName | el |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | CalleeFlexibleAccessPath | el.addEventListener |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | (e) =>  ...  \\n    } | receiverName | el |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:33:25:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:23:34:23:34 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:9 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:16 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:21 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:9:24:58 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:11:24:15 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:18:24:21 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:23 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:36 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:44 | e.dataT ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:23:24:57 | exceptional return of e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:25:24:36 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:38:24:44 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | contextSurroundingFunctionParameters | (el)\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | enclosingFunctionBody | el HTMLElement el addEventListener drop e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | enclosingFunctionName | install |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:24:46:24:56 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:28:25 | documen ... istener | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | documen ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:1:30:2 | exceptional return of documen ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:10:28:25 | addEventListener | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | CalleeFlexibleAccessPath | document.addEventListener |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:27:28:32 | 'drop' | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | CalleeFlexibleAccessPath | document.addEventListener |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | (e) =>  ... OT OK\\n} | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:35:30:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:28:36:28:36 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:12 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:17 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:5:29:54 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:7:29:11 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:14:29:17 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:19 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:32 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:40 | e.dataT ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:19:29:53 | exceptional return of e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:21:29:32 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:34:29:40 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | enclosingFunctionBody | e $ #id html e dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | enclosingFunctionName | document.addEventListener#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:29:42:29:52 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:1 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:9 | exceptional return of $("#foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:32:14 | $("#foo").bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | $("#foo ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:1:34:2 | exceptional return of $("#foo ... T OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:3:32:8 | "#foo" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:11:32:14 | bind | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | CalleeFlexibleAccessPath | $().bind |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:16:32:21 | 'drop' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) =>  ... OT OK\\n} | CalleeFlexibleAccessPath | $().bind |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) =>  ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) =>  ... OT OK\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) =>  ... OT OK\\n} | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | (e) =>  ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:24:34:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:32:25:32:25 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:12 | exceptional return of $("#id") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:17 | $("#id").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:5:33:68 | exceptional return of $("#id" ... html')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:7:33:11 | "#id" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:14:33:17 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:19 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:33 | e.originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:46 | e.origi ... ransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:54 | e.origi ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | e.origi ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:19:33:67 | exceptional return of e.origi ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:21:33:33 | originalEvent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:35:33:46 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:48:33:54 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | CalleeFlexibleAccessPath | e.originalEvent.dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | enclosingFunctionBody | e $ #id html e originalEvent dataTransfer getData text/html |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | enclosingFunctionName | bind#functionalargument |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:33:56:33:66 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ...    }\\n}) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:2 | (functi ...    }\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ...  }\\n})() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | (functi ...  }\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:1:56:4 | exceptional return of (functi ...  }\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:36:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ...     }\\n} | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | functio ...     }\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:36:2:56:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:11 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:9:37:43 | div = d ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:22 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:36 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:15:37:43 | exceptional return of documen ... ("div") | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:24:37:36 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:37:38:37:42 | "div" | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:7 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:38:14 | div.ondrop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n    } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n    } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:5:55:5 | div.ond ... ;\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:9:38:14 | ondrop | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:38:17 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | assignedToPropName | ondrop |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | functio ... ;\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:18:55:5 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:38:28:38:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:30 | { dataTransfer } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:15:39:34 | { dataTransfer } = e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:17:39:28 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:39:34:39:34 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:13:40:25 | !dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:40:14:40:25 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:18 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text =  ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text =  ... plain') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text =  ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text =  ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:15:42:55 | text =  ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:33 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:41 | dataTransfer.getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | dataTra ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:22:42:55 | exceptional return of dataTra ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:35:42:41 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | CalleeFlexibleAccessPath | dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:42:43:42:54 | 'text/plain' | receiverName | dataTransfer |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html =  ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html =  ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html =  ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html =  ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:15:43:54 | html =  ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:33 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:41 | dataTransfer.getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:22:43:54 | exceptional return of dataTra ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:35:43:41 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | CalleeFlexibleAccessPath | dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:43:43:43:53 | 'text/html' | receiverName | dataTransfer |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:17 | !text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:13:44:26 | !text && !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:14:44:17 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:22:44:26 | !html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:44:23:44:26 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:9 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:24 | e.preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:9:46:26 | exceptional return of e.preventDefault() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:46:11:46:24 | preventDefault | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:17 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:15:48:49 | div = d ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:28 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:42 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:21:48:49 | exceptional return of documen ... ('div') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:30:48:42 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:48:44:48:48 | 'div' | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:49:13:49:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:15 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:25 | div.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:13:50:32 | div.innerHTML = html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:17:50:25 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:50:29:50:32 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:15 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:27 | div.textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ...  = text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ...  = text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ...  = text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ...  = text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:13:52:34 | div.tex ...  = text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:17:52:27 | textContent | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | assignedToPropName | textContent |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:52:31:52:34 | text | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:16 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:21 | document.body | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:28 | document.body.append | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:9:54:33 | exceptional return of documen ... nd(div) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:18:54:21 | body | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:23:54:28 | append | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | CalleeFlexibleAccessPath | document.body.append |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | enclosingFunctionBody | div document createElement div div ondrop e DragEvent dataTransfer e dataTransfer text dataTransfer getData text/plain html dataTransfer getData text/html text html e preventDefault div document createElement div html div innerHTML html div textContent text document body append div |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:54:30:54:32 | div | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:58:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | 'arguments' object of function getDropData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n  } | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | async f ... ms;\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | exceptional return of function getDropData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:1:89:3 | return of function getDropData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:16:58:26 | getDropData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:58:28:58:28 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:19 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropIte ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:11:60:46 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | exceptional return of new Set ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:23:60:46 | new Set ... ring>() | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:60:27:60:29 | Set | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:22 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:28 | e.dataTransfer.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:35 | e.dataT ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:9:63:39 | e.dataT ... gth > 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:11:63:22 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:24:63:28 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:30:63:35 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:63:39:63:39 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:16 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:16:65:20 | i = 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:20:65:20 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:23 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:23:65:53 | i < e.d ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:27 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:40 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:46 | e.dataTransfer.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:27:65:53 | e.dataT ... .length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:29:65:40 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:42:65:46 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:48:65:53 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:56 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:65:56:65:58 | i++ | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:18 | file | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file =  ... iles[i] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file =  ... iles[i] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file =  ... iles[i] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file =  ... iles[i] | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:15:66:44 | file =  ... iles[i] | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:22 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:35 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:41 | e.dataTransfer.files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:22:66:44 | e.dataT ... iles[i] | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:24:66:35 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:37:66:41 | files | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:66:43:66:43 | i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:9 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:22 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:28 | e.dataTransfer.types | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:37 | e.dataT ... ncludes | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:9:70:50 | exceptional return of e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:11:70:22 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:24:70:28 | types | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:30:70:37 | includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.types.includes |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:70:39:70:49 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:23 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | dropped ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:13:71:61 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:27 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:40 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:48 | e.dataT ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:27:71:61 | exceptional return of e.dataT ... /html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:29:71:40 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:42:71:48 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | CalleeFlexibleAccessPath | e.dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:71:50:71:60 | 'text/html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:21 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | contain ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:13:72:54 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:32 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:46 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | documen ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:25:72:54 | exceptional return of documen ... 'html') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:34:72:46 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:72:48:72:53 | 'html' | receiverName | document |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:15 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:25 | container.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:7:73:39 | contain ... pedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:17:73:25 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:73:29:73:39 | droppedHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:16 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs =  ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs =  ... ('img') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs =  ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs =  ... ('img') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:13:74:56 | imgs =  ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:28 | container | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:49 | contain ... TagName | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | contain ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:20:74:56 | exceptional return of contain ... ('img') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:30:74:49 | getElementsByTagName | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | CalleeFlexibleAccessPath | container.getElementsByTagName |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:74:51:74:55 | 'img' | receiverName | container |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:14 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:21 | imgs.length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:11:75:27 | imgs.length === 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:16:75:21 | length | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:75:27:75:27 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:17 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:15:76:31 | src = imgs[0].src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:24 | imgs | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:27 | imgs[0] | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:21:76:31 | imgs[0].src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:26:76:26 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:76:29:76:31 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:17 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:21 | dropItems.add | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | dropItems.add(src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:9:77:26 | exceptional return of dropItems.add(src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:19:77:21 | add | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | CalleeFlexibleAccessPath | dropItems.add |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:77:23:77:25 | src | receiverName | dropItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:16 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:29 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:35 | e.dataTransfer.types | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:44 | e.dataT ... ncludes | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | e.dataT ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:16:79:58 | exceptional return of e.dataT ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:18:79:29 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:31:79:35 | types | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:37:79:44 | includes | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | CalleeFlexibleAccessPath | e.dataTransfer.types.includes |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:79:46:79:57 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:21 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainTe ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:13:80:60 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:25 | e | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:38 | e.dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:46 | e.dataT ... getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | e.dataT ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:25:80:60 | exceptional return of e.dataT ... plain') | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:27:80:38 | dataTransfer | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:40:80:46 | getData | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | CalleeFlexibleAccessPath | e.dataTransfer.getData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:80:48:80:59 | 'text/plain' | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:25 | /^https?:\\/\\//i | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:30 | /^https?:\\/\\//i.test | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | /^https ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:11:82:41 | exceptional return of /^https ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:27:82:30 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:82:32:82:40 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:17 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:21 | dropItems.add | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | dropIte ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:9:83:32 | exceptional return of dropIte ... inText) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:19:83:21 | add | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | CalleeFlexibleAccessPath | dropItems.add |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:83:23:83:31 | plainText | receiverName | dropItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:20 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageIt ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:11:87:44 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:28 | Array | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:33 | Array.from | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | Array.f ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:24:87:44 | exceptional return of Array.f ... pItems) | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:30:87:33 | from | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | CalleeFlexibleAccessPath | Array.from |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:87:35:87:43 | dropItems | receiverName | Array |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | contextFunctionInterfaces | drop(e)\ngetDropData(e)\ninstall(el)\nondrop(e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | enclosingFunctionBody | e DragEvent Promise Array File dropItems Set File e dataTransfer files length 0 i 0 i e dataTransfer files length i file e dataTransfer files i e dataTransfer types includes text/html droppedHtml e dataTransfer getData text/html container document createElement html container innerHTML droppedHtml imgs container getElementsByTagName img imgs length 1 src imgs 0 0 src dropItems add src e dataTransfer types includes text/plain plainText e dataTransfer getData text/plain /^https?:\\/\\//i test plainText dropItems add plainText imageItems Array from dropItems imageItems |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | enclosingFunctionName | getDropData |
| autogenerated/Xss/DomBasedXss/dragAndDrop.ts:88:12:88:21 | imageItems | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | functio ... // OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:1:4:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:1:10:1:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:9 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:7:2:32 | loc = w ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:18 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:27 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:13:2:32 | window.location.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:20:2:27 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:2:29:2:32 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('<a h ... k</a>') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('<a h ... k</a>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('<a h ... k</a>') | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('<a h ... k</a>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | $('<a h ... k</a>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('<a h ... k</a>') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('<a h ... k</a>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('<a h ... k</a>') | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('<a h ... k</a>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:3:3:58 | exceptional return of $('<a h ... k</a>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:15 | '<a href="' | stringConcatenatedWith |  -endpoint- encodeURIComponent() + '">click</a>' |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '<a hre ... nt(loc) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '<a hre ... nt(loc) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '<a hre ... nt(loc) | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '<a hre ... nt(loc) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:41 | '<a hre ... nt(loc) | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:5:3:57 | '<a hre ... ck</a>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:36 | encodeURIComponent | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | encodeU ... nt(loc) | stringConcatenatedWith | '<a href="' -endpoint- '">click</a>' |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:19:3:41 | exceptional return of encodeU ... nt(loc) | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | CalleeFlexibleAccessPath | encodeURIComponent |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:38:3:40 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | enclosingFunctionBody | loc window location href $ <a href=" encodeURIComponent loc ">click</a> |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/encodeuri.js:3:45:3:57 | '">click</a>' | stringConcatenatedWith | '<a href="' + encodeURIComponent() -endpoint-  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:0 | this | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:8 | document | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:23 | documen ... entById | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:23 | documen ... entById | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:23 | documen ... entById | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | documen ... my-id') | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | documen ... my-id') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | documen ... my-id') | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | exceptional return of documen ... my-id') | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | exceptional return of documen ... my-id') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:32 | exceptional return of documen ... my-id') | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:40 | documen ... onclick | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:40 | documen ... onclick | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:1:40 | documen ... onclick | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:3:1 | documen ... OT OK\\n} | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:3:1 | documen ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:1:3:1 | documen ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:10:1:23 | getElementById | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:10:1:23 | getElementById | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:10:1:23 | getElementById | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:25:1:31 | 'my-id' | receiverName | document |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:34:1:40 | onclick | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:34:1:40 | onclick | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:34:1:40 | onclick | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:1:43 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | assignedToPropName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:1:44:3:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:6 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:17 | this.parentNode | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:27 | this.pa ... nerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... ></h2>' | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... ></h2>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... ></h2>' | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... ></h2>' | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:3:2:83 | this.pa ... ></h2>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:8:2:17 | parentNode | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:19:2:27 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:45 | '<h2><a href="' | stringConcatenatedWith |  -endpoint- location.href + '">A link</a></h2>' |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '<h2><a ... on.href | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '<h2><a ... on.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '<h2><a ... on.href | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '<h2><a ... on.href | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:61 | '<h2><a ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:31:2:83 | '<h2><a ... ></h2>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:56 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:49:2:61 | location.href | stringConcatenatedWith | '<h2><a href="' -endpoint- '">A link</a></h2>' |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:58:2:61 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | contextFunctionInterfaces | onclick() |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | enclosingFunctionBody | parentNode innerHTML <h2><a href=" location href ">A link</a></h2> |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | enclosingFunctionName | onclick |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/event-handler-receiver.js:2:65:2:83 | '">A link</a></h2>' | stringConcatenatedWith | '<h2><a href="' + location.href -endpoint-  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:0 | this | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:1:1:1 | require | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:11 | express | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:5:1:32 | express ... press') | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:21 | require | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | exceptional return of require('express') | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:15:1:32 | require('express') | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:1:23:1:31 | 'express' | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:7 | app | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:5:2:19 | app = express() | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:17 | express | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | exceptional return of express() | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:2:11:2:19 | express() | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:1:4:30 | import  ... jsdom"; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:1:4:30 | import  ... jsdom"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:1:4:30 | import  ... jsdom"; | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:10:4:14 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:4:23:4:29 | "jsdom" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:4:23:4:29 | "jsdom" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:4:23:4:29 | "jsdom" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:3 | app | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:5:7 | app.get | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | app.get ...  });\\n}) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:1:11:2 | exceptional return of app.get ...  });\\n}) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:5:5:7 | get | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | calleeImports | express |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:9:5:20 | '/some/path' | receiverName | app |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | JSDOM | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | JSDOM | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | this | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:23:5:22 | this | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | 'arguments' object of anonymous function | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | exceptional return of anonymous function | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | calleeImports | express |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | functio ... " });\\n} | receiverName | app |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | return of anonymous function | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:23:11:1 | return of anonymous function | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:33:5:35 | req | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:5:38:5:40 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:5:38:5:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:5:38:5:40 | res | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:5:38:5:40 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:5:38:5:40 | res | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | exceptional return of new JSD ... sly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | exceptional return of new JSD ... sly" }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | exceptional return of new JSD ... sly" }) | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | exceptional return of new JSD ... sly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | exceptional return of new JSD ... sly" }) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | new JSD ... sly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | new JSD ... sly" }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | new JSD ... sly" }) | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | new JSD ... sly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:5:7:65 | new JSD ... sly" }) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:9:7:13 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:9:7:13 | JSDOM | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:9:7:13 | JSDOM | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:9:7:13 | JSDOM | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:9:7:13 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:17 | req | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:17 | req | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:23 | req.param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:23 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:23 | req.param | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:23 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:23 | req.param | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | exceptional return of req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | exceptional return of req.param("wobble") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | exceptional return of req.param("wobble") | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | exceptional return of req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | exceptional return of req.param("wobble") | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:15:7:33 | req.param("wobble") | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:19:7:23 | param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:19:7:23 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:19:7:23 | param | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:19:7:23 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:19:7:23 | param | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | CalleeFlexibleAccessPath | req.param |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:25:7:32 | "wobble" | receiverName | req |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:36:7:64 | { runSc ... usly" } | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:47 | runScripts | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:47 | runScripts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:47 | runScripts | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:47 | runScripts | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:47 | runScripts | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:38:7:62 | runScri ... rously" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | InputAccessPathFromCallee | ?.runScripts |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | assignedToPropName | runScripts |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:7:50:7:62 | "dangerously" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | exceptional return of new JSD ... nly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | exceptional return of new JSD ... nly" }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | exceptional return of new JSD ... nly" }) | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | exceptional return of new JSD ... nly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | exceptional return of new JSD ... nly" }) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | new JSD ... nly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | new JSD ... nly" }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | new JSD ... nly" }) | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | new JSD ... nly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:5:10:66 | new JSD ... nly" }) | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:9:10:13 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:9:10:13 | JSDOM | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:9:10:13 | JSDOM | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:9:10:13 | JSDOM | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:9:10:13 | JSDOM | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:17 | req | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:17 | req | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:23 | req.param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:23 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:23 | req.param | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:23 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:23 | req.param | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | exceptional return of req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | exceptional return of req.param("wobble") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | exceptional return of req.param("wobble") | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | exceptional return of req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | exceptional return of req.param("wobble") | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:15:10:33 | req.param("wobble") | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:19:10:23 | param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:19:10:23 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:19:10:23 | param | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:19:10:23 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:19:10:23 | param | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | CalleeFlexibleAccessPath | req.param |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:25:10:32 | "wobble" | receiverName | req |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:36:10:65 | { runSc ... only" } | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:47 | runScripts | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:47 | runScripts | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:47 | runScripts | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:47 | runScripts | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:47 | runScripts | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:38:10:63 | runScri ... e-only" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | InputAccessPathFromCallee | ?.runScripts |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | assignedToPropName | runScripts |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | enclosingFunctionBody | req res JSDOM req param wobble runScripts dangerously JSDOM req param wobble runScripts outside-only |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/express.js:10:50:10:63 | "outside-only" | fileImports | express jsdom |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:1:1:35:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:1:10:1:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:13 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:7:2:40 | tainted ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:33 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:17:2:40 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:26:2:33 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:2:35:2:40 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | $(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:4:3:4:12 | exceptional return of $(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:4:5:4:11 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | $("body", tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:5:3:5:20 | exceptional return of $("body", tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:5:5:5:10 | "body" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:5:13:5:19 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | $("." + tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:3:6:18 | exceptional return of $("." + tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:7 | "." | stringConcatenatedWith |  -endpoint- tainted |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:5:6:17 | "." + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:6:11:6:17 | tainted | stringConcatenatedWith | '.' -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("<div ...  "\\">") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("<div ...  "\\">") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("<div ...  "\\">") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("<div ...  "\\">") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | $("<div ...  "\\">") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("<div ...  "\\">") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("<div ...  "\\">") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("<div ...  "\\">") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("<div ...  "\\">") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:3:7:35 | exceptional return of $("<div ...  "\\">") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:16 | "<div id=\\"" | stringConcatenatedWith |  -endpoint- tainted + '">' |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "<div i ... tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "<div i ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "<div i ... tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "<div i ... tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:26 | "<div i ... tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:5:7:34 | "<div i ... + "\\">" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:20:7:26 | tainted | stringConcatenatedWith | '<div id="' -endpoint- '">' |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:7:30:7:34 | "\\">" | stringConcatenatedWith | '<div id="' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | $("body") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | $("body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | $("body") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | $("body") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | $("body") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | exceptional return of $("body") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | exceptional return of $("body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | exceptional return of $("body") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | exceptional return of $("body") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:11 | exceptional return of $("body") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:16 | $("body").html | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:16 | $("body").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:16 | $("body").html | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:16 | $("body").html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:16 | $("body").html | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | $("body ... ainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | $("body ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | $("body ... ainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | $("body ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | $("body ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | exceptional return of $("body ... ainted) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | exceptional return of $("body ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | exceptional return of $("body ... ainted) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | exceptional return of $("body ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:3:8:35 | exceptional return of $("body ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:5:8:10 | "body" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:13:8:16 | html | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:13:8:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:13:8:16 | html | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:13:8:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:13:8:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:24 | "XSS: " | stringConcatenatedWith |  -endpoint- tainted |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:18:8:34 | "XSS: " + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:8:28:8:34 | tainted | stringConcatenatedWith | 'XSS: ' -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | $(windo ... n.hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | $(windo ... n.hash) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | $(windo ... n.hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | $(windo ... n.hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | $(windo ... n.hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | exceptional return of $(windo ... n.hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | exceptional return of $(windo ... n.hash) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | exceptional return of $(windo ... n.hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | exceptional return of $(windo ... n.hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:3:9:25 | exceptional return of $(windo ... n.hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:10 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:10 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:10 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:10 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:10 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:19 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:19 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:19 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:19 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:19 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:5:9:24 | window.location.hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:12:9:19 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:12:9:19 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:12:9:19 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:12:9:19 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:12:9:19 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:9:21:9:24 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:9:21:9:24 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:9:21:9:24 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:9:21:9:24 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:9:21:9:24 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | $("<b>" ... "</b>") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | $("<b>" ... "</b>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | $("<b>" ... "</b>") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | $("<b>" ... "</b>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | $("<b>" ... "</b>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | exceptional return of $("<b>" ... "</b>") | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | exceptional return of $("<b>" ... "</b>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | exceptional return of $("<b>" ... "</b>") | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | exceptional return of $("<b>" ... "</b>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:3:10:41 | exceptional return of $("<b>" ... "</b>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:9 | "<b>" | stringConcatenatedWith |  -endpoint- location.toString() + '</b>' |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:31 | "<b>" + ... tring() | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:31 | "<b>" + ... tring() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:31 | "<b>" + ... tring() | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:31 | "<b>" + ... tring() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:31 | "<b>" + ... tring() | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:5:10:40 | "<b>" + ...  "</b>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:20 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:20 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:20 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:20 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:20 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:29 | location.toString | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:29 | location.toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:29 | location.toString | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:29 | location.toString | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:29 | location.toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | exceptional return of location.toString() | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | exceptional return of location.toString() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | exceptional return of location.toString() | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | exceptional return of location.toString() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | exceptional return of location.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:13:10:31 | location.toString() | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/jquery.js:10:22:10:29 | toString | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:22:10:29 | toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:22:10:29 | toString | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:22:10:29 | toString | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:22:10:29 | toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:10:35:10:40 | "</b>" | stringConcatenatedWith | '<b>' + location.toString() -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:9 | elm | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:9 | elm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:9 | elm | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:9 | elm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:9 | elm | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm = d ... Id('x') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm = d ... Id('x') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm = d ... Id('x') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm = d ... Id('x') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:7:13:40 | elm = d ... Id('x') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:20 | document | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:20 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:20 | document | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:20 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:20 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:35 | documen ... entById | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:35 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:35 | documen ... entById | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:35 | documen ... entById | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:35 | documen ... entById | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | documen ... Id('x') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | documen ... Id('x') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | documen ... Id('x') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | documen ... Id('x') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | documen ... Id('x') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | exceptional return of documen ... Id('x') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | exceptional return of documen ... Id('x') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | exceptional return of documen ... Id('x') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | exceptional return of documen ... Id('x') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:13:13:40 | exceptional return of documen ... Id('x') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:22:13:35 | getElementById | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:22:13:35 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:22:13:35 | getElementById | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:22:13:35 | getElementById | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:22:13:35 | getElementById | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:13:37:13:39 | 'x' | receiverName | document |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:5 | elm | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:5 | elm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:5 | elm | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:5 | elm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:5 | elm | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:15 | elm.innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:15 | elm.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:15 | elm.innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:15 | elm.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:15 | elm.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:58 | elm.inn ... n.hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:58 | elm.inn ... n.hash) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:58 | elm.inn ... n.hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:58 | elm.inn ... n.hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:3:14:58 | elm.inn ... n.hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:7:14:15 | innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:7:14:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:7:14:15 | innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:7:14:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:7:14:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:36 | decodeURIComponent | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:36 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:36 | decodeURIComponent | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:36 | decodeURIComponent | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:36 | decodeURIComponent | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | decodeU ... n.hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | exceptional return of decodeU ... n.hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | exceptional return of decodeU ... n.hash) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | exceptional return of decodeU ... n.hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | exceptional return of decodeU ... n.hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:19:14:58 | exceptional return of decodeU ... n.hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:43 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:43 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:43 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:43 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:43 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:52 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:52 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:52 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:52 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:52 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:38:14:57 | window.location.hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:45:14:52 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:45:14:52 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:45:14:52 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:45:14:52 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:45:14:52 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:14:54:14:57 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:14:54:14:57 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:14:54:14:57 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:14:54:14:57 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:14:54:14:57 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:5 | elm | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:5 | elm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:5 | elm | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:5 | elm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:5 | elm | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:15 | elm.innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:15 | elm.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:15 | elm.innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:15 | elm.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:15 | elm.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:60 | elm.inn ... search) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:60 | elm.inn ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:60 | elm.inn ... search) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:60 | elm.inn ... search) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:3:15:60 | elm.inn ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:7:15:15 | innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:7:15:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:7:15:15 | innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:7:15:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:7:15:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:36 | decodeURIComponent | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:36 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:36 | decodeURIComponent | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:36 | decodeURIComponent | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:36 | decodeURIComponent | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | decodeU ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | exceptional return of decodeU ... search) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | exceptional return of decodeU ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | exceptional return of decodeU ... search) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | exceptional return of decodeU ... search) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:19:15:60 | exceptional return of decodeU ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:43 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:43 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:43 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:43 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:43 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:52 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:52 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:52 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:52 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:52 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:38:15:59 | window. ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:45:15:52 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:45:15:52 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:45:15:52 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:45:15:52 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:45:15:52 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:15:54:15:59 | search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:15:54:15:59 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:15:54:15:59 | search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:15:54:15:59 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:15:54:15:59 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:5 | elm | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:5 | elm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:5 | elm | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:5 | elm | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:5 | elm | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:15 | elm.innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:15 | elm.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:15 | elm.innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:15 | elm.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:15 | elm.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:64 | elm.inn ... ring()) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:64 | elm.inn ... ring()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:64 | elm.inn ... ring()) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:64 | elm.inn ... ring()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:3:16:64 | elm.inn ... ring()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:7:16:15 | innerHTML | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:7:16:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:7:16:15 | innerHTML | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:7:16:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:7:16:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:36 | decodeURIComponent | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:36 | decodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:36 | decodeURIComponent | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:36 | decodeURIComponent | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:36 | decodeURIComponent | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | decodeU ... ring()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | exceptional return of decodeU ... ring()) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | exceptional return of decodeU ... ring()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | exceptional return of decodeU ... ring()) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | exceptional return of decodeU ... ring()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:19:16:64 | exceptional return of decodeU ... ring()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:43 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:43 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:43 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:43 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:43 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:52 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:52 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:52 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:52 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:52 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:61 | window. ... oString | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:61 | window. ... oString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:61 | window. ... oString | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:61 | window. ... oString | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:61 | window. ... oString | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | exceptional return of window. ... tring() | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | exceptional return of window. ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | exceptional return of window. ... tring() | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | exceptional return of window. ... tring() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | exceptional return of window. ... tring() | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:38:16:63 | window. ... tring() | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:45:16:52 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:45:16:52 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:45:16:52 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:45:16:52 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:45:16:52 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:16:54:16:61 | toString | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:16:54:16:61 | toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:16:54:16:61 | toString | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:16:54:16:61 | toString | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:16:54:16:61 | toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:10 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:10 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:10 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:10 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:10 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash =  ... on.hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash =  ... on.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash =  ... on.hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash =  ... on.hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:7:18:33 | hash =  ... on.hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:19 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:19 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:19 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:19 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:19 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:28 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:28 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:28 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:28 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:28 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:33 | window.location.hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:33 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:33 | window.location.hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:33 | window.location.hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:14:18:33 | window.location.hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:21:18:28 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:21:18:28 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:21:18:28 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:21:18:28 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:21:18:28 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:18:30:18:33 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:18:30:18:33 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:18:30:18:33 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:18:30:18:33 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:18:30:18:33 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | $(hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | $(hash) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | $(hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | $(hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | $(hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | exceptional return of $(hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | exceptional return of $(hash) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | exceptional return of $(hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | exceptional return of $(hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:19:3:19:9 | exceptional return of $(hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:19:5:19:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | $(hash.substring(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | $(hash.substring(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | $(hash.substring(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | $(hash.substring(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | $(hash.substring(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | exceptional return of $(hash.substring(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | exceptional return of $(hash.substring(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | exceptional return of $(hash.substring(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | exceptional return of $(hash.substring(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:3:21:22 | exceptional return of $(hash.substring(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:18 | hash.substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:18 | hash.substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:18 | hash.substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:18 | hash.substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:18 | hash.substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | exceptional return of hash.substring(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | exceptional return of hash.substring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | exceptional return of hash.substring(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | exceptional return of hash.substring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | exceptional return of hash.substring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:5:21:21 | hash.substring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:10:21:18 | substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:10:21:18 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:10:21:18 | substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:10:21:18 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:10:21:18 | substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | CalleeFlexibleAccessPath | hash.substring |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:21:20:21:20 | 1 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | $(hash. ... 1, 10)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | $(hash. ... 1, 10)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | $(hash. ... 1, 10)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | $(hash. ... 1, 10)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | $(hash. ... 1, 10)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | exceptional return of $(hash. ... 1, 10)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | exceptional return of $(hash. ... 1, 10)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | exceptional return of $(hash. ... 1, 10)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | exceptional return of $(hash. ... 1, 10)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:3:22:26 | exceptional return of $(hash. ... 1, 10)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:18 | hash.substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:18 | hash.substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:18 | hash.substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:18 | hash.substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:18 | hash.substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | exceptional return of hash.su ... (1, 10) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | exceptional return of hash.su ... (1, 10) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | exceptional return of hash.su ... (1, 10) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | exceptional return of hash.su ... (1, 10) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | exceptional return of hash.su ... (1, 10) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:5:22:25 | hash.su ... (1, 10) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:10:22:18 | substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:10:22:18 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:10:22:18 | substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:10:22:18 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:10:22:18 | substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | CalleeFlexibleAccessPath | hash.substring |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:20:22:20 | 1 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | CalleeFlexibleAccessPath | hash.substring |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:22:23:22:24 | 10 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | $(hash.substr(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | $(hash.substr(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | $(hash.substr(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | $(hash.substr(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | $(hash.substr(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | exceptional return of $(hash.substr(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | exceptional return of $(hash.substr(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | exceptional return of $(hash.substr(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | exceptional return of $(hash.substr(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:3:23:19 | exceptional return of $(hash.substr(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:15 | hash.substr | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:15 | hash.substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:15 | hash.substr | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:15 | hash.substr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:15 | hash.substr | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | exceptional return of hash.substr(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | exceptional return of hash.substr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | exceptional return of hash.substr(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | exceptional return of hash.substr(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | exceptional return of hash.substr(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:5:23:18 | hash.substr(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:10:23:15 | substr | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:10:23:15 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:10:23:15 | substr | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:10:23:15 | substr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:10:23:15 | substr | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | CalleeFlexibleAccessPath | hash.substr |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:23:17:23:17 | 1 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | $(hash.slice(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | $(hash.slice(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | $(hash.slice(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | $(hash.slice(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | $(hash.slice(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | exceptional return of $(hash.slice(1)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | exceptional return of $(hash.slice(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | exceptional return of $(hash.slice(1)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | exceptional return of $(hash.slice(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:3:24:18 | exceptional return of $(hash.slice(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:14 | hash.slice | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:14 | hash.slice | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:14 | hash.slice | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:14 | hash.slice | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:14 | hash.slice | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | exceptional return of hash.slice(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | exceptional return of hash.slice(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | exceptional return of hash.slice(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | exceptional return of hash.slice(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | exceptional return of hash.slice(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:5:24:17 | hash.slice(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:10:24:14 | slice | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:10:24:14 | slice | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:10:24:14 | slice | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:10:24:14 | slice | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:10:24:14 | slice | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | CalleeFlexibleAccessPath | hash.slice |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:24:16:24:16 | 1 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | $(hash. ... 0, 10)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | $(hash. ... 0, 10)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | $(hash. ... 0, 10)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | $(hash. ... 0, 10)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | $(hash. ... 0, 10)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | exceptional return of $(hash. ... 0, 10)) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | exceptional return of $(hash. ... 0, 10)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | exceptional return of $(hash. ... 0, 10)) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | exceptional return of $(hash. ... 0, 10)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:3:25:26 | exceptional return of $(hash. ... 0, 10)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:18 | hash.substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:18 | hash.substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:18 | hash.substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:18 | hash.substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:18 | hash.substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | exceptional return of hash.su ... (0, 10) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | exceptional return of hash.su ... (0, 10) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | exceptional return of hash.su ... (0, 10) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | exceptional return of hash.su ... (0, 10) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | exceptional return of hash.su ... (0, 10) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:5:25:25 | hash.su ... (0, 10) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:10:25:18 | substring | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:10:25:18 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:10:25:18 | substring | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:10:25:18 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:10:25:18 | substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | CalleeFlexibleAccessPath | hash.substring |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:20:25:20 | 0 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | CalleeFlexibleAccessPath | hash.substring |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:25:23:25:24 | 10 | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | $(hash. ... ', '')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | exceptional return of $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | exceptional return of $(hash. ... ', '')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | exceptional return of $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | exceptional return of $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:3:27:26 | exceptional return of $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:16 | hash.replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:16 | hash.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:16 | hash.replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:16 | hash.replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:16 | hash.replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | exceptional return of hash.re ... #', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | exceptional return of hash.re ... #', '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | exceptional return of hash.re ... #', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | exceptional return of hash.re ... #', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | exceptional return of hash.re ... #', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:5:27:25 | hash.re ... #', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:10:27:16 | replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:10:27:16 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:10:27:16 | replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:10:27:16 | replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:10:27:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:18:27:20 | '#' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:27:23:27:24 | '' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | $(windo ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | $(windo ... ', '')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | $(windo ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | $(windo ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | $(windo ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | exceptional return of $(windo ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | exceptional return of $(windo ... ', '')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | exceptional return of $(windo ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | exceptional return of $(windo ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:3:28:44 | exceptional return of $(windo ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:10 | window | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:10 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:10 | window | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:10 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:10 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:19 | window.location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:19 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:19 | window.location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:19 | window.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:19 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:26 | window. ... .search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:26 | window. ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:26 | window. ... .search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:26 | window. ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:26 | window. ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:34 | window. ... replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:34 | window. ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:34 | window. ... replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:34 | window. ... replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:34 | window. ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | exceptional return of window. ... ?', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | exceptional return of window. ... ?', '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | exceptional return of window. ... ?', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | exceptional return of window. ... ?', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | exceptional return of window. ... ?', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:5:28:43 | window. ... ?', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:12:28:19 | location | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:12:28:19 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:12:28:19 | location | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:12:28:19 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:12:28:19 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:21:28:26 | search | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:21:28:26 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:21:28:26 | search | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:21:28:26 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:21:28:26 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:28:28:34 | replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:28:28:34 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:28:28:34 | replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:28:28:34 | replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:28:28:34 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | CalleeFlexibleAccessPath | window.location.search.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:36:28:38 | '?' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | CalleeFlexibleAccessPath | window.location.search.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:28:41:28:42 | '' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | $(hash. ... ', '')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | exceptional return of $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | exceptional return of $(hash. ... ', '')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | exceptional return of $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | exceptional return of $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:3:29:26 | exceptional return of $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:16 | hash.replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:16 | hash.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:16 | hash.replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:16 | hash.replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:16 | hash.replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | exceptional return of hash.re ... !', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | exceptional return of hash.re ... !', '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | exceptional return of hash.re ... !', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | exceptional return of hash.re ... !', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | exceptional return of hash.re ... !', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:5:29:25 | hash.re ... !', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:10:29:16 | replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:10:29:16 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:10:29:16 | replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:10:29:16 | replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:10:29:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:18:29:20 | '!' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:29:23:29:24 | '' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | $(hash. ... ', '')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | exceptional return of $(hash. ... ', '')) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | exceptional return of $(hash. ... ', '')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | exceptional return of $(hash. ... ', '')) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | exceptional return of $(hash. ... ', '')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:3:30:29 | exceptional return of $(hash. ... ', '')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:16 | hash.replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:16 | hash.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:16 | hash.replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:16 | hash.replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:16 | hash.replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | exceptional return of hash.re ... h', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | exceptional return of hash.re ... h', '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | exceptional return of hash.re ... h', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | exceptional return of hash.re ... h', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | exceptional return of hash.re ... h', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:5:30:28 | hash.re ... h', '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:10:30:16 | replace | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:10:30:16 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:10:30:16 | replace | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:10:30:16 | replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:10:30:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:18:30:23 | 'blah' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | CalleeFlexibleAccessPath | hash.replace |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:30:26:30:27 | '' | receiverName | hash |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | $(hash + 'blah') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | $(hash + 'blah') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | $(hash + 'blah') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | $(hash + 'blah') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | $(hash + 'blah') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | exceptional return of $(hash + 'blah') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | exceptional return of $(hash + 'blah') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | exceptional return of $(hash + 'blah') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | exceptional return of $(hash + 'blah') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:3:32:18 | exceptional return of $(hash + 'blah') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:8 | hash | stringConcatenatedWith |  -endpoint- 'blah' |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:5:32:17 | hash + 'blah' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:32:12:32:17 | 'blah' | stringConcatenatedWith | hash -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | $('blah' + hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | $('blah' + hash) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | $('blah' + hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | $('blah' + hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | $('blah' + hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | exceptional return of $('blah' + hash) | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | exceptional return of $('blah' + hash) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | exceptional return of $('blah' + hash) | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | exceptional return of $('blah' + hash) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:3:33:18 | exceptional return of $('blah' + hash) | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:10 | 'blah' | stringConcatenatedWith |  -endpoint- hash |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:5:33:17 | 'blah' + hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:33:14:33:17 | hash | stringConcatenatedWith | 'blah' -endpoint-  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:3 | $ | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:3 | $ | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | $('<b>' ... '</b>') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | $('<b>' ... '</b>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | $('<b>' ... '</b>') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | $('<b>' ... '</b>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | $('<b>' ... '</b>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | exceptional return of $('<b>' ... '</b>') | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | exceptional return of $('<b>' ... '</b>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | exceptional return of $('<b>' ... '</b>') | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | exceptional return of $('<b>' ... '</b>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:3:34:26 | exceptional return of $('<b>' ... '</b>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:9 | '<b>' | stringConcatenatedWith |  -endpoint- hash + '</b>' |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:16 | '<b>' + hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:16 | '<b>' + hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:16 | '<b>' + hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:16 | '<b>' + hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:16 | '<b>' + hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:5:34:25 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:13:34:16 | hash | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | contextFunctionInterfaces | test() |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | enclosingFunctionBody | tainted document location search $ tainted $ body tainted $ . tainted $ <div id=" tainted "> $ body html XSS:  tainted $ window location hash $ <b> location toString </b> elm document getElementById x elm innerHTML decodeURIComponent window location hash elm innerHTML decodeURIComponent window location search elm innerHTML decodeURIComponent window location toString hash window location hash $ hash $ hash substring 1 $ hash substring 1 10 $ hash substr 1 $ hash slice 1 $ hash substring 0 10 $ hash replace #  $ window location search replace ?  $ hash replace !  $ hash replace blah  $ hash blah $ blah hash $ <b> hash </b> |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/jquery.js:34:20:34:25 | '</b>' | stringConcatenatedWith | '<b>' + hash -endpoint-  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:0 | this | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:1:1:1 | require | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:11 | express | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:5:1:32 | express ... press') | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:21 | require | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | exceptional return of require('express') | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:15:1:32 | require('express') | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:1:23:1:31 | 'express' | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:7 | app | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:5:2:19 | app = express() | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:17 | express | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | exceptional return of express() | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:2:11:2:19 | express() | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:1:3:31 | import  ... token"; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:1:3:31 | import  ... token"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:1:3:31 | import  ... token"; | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:8:3:10 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:17:3:30 | "jsonwebtoken" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:17:3:30 | "jsonwebtoken" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:3:17:3:30 | "jsonwebtoken" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:1:5:30 | import  ... jsdom"; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:1:5:30 | import  ... jsdom"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:1:5:30 | import  ... jsdom"; | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:10:5:14 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:23:5:29 | "jsdom" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:23:5:29 | "jsdom" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:5:23:5:29 | "jsdom" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:3 | app | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:6:7 | app.get | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | app.get ...  });\\n}) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:1:13:2 | exceptional return of app.get ...  });\\n}) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:5:6:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:5:6:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:5:6:7 | get | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | calleeImports | express |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:9:6:20 | '/some/path' | receiverName | app |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | jwt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | jwt | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | jwt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | this | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:6:22 | this | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | 'arguments' object of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | exceptional return of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | exceptional return of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | calleeImports | express |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | functio ...   });\\n} | receiverName | app |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | return of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:23:13:1 | return of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:33:6:35 | req | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:38:6:40 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:38:6:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:38:6:40 | res | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:38:6:40 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:6:38:6:40 | res | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:13 | taint | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:13 | taint | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:13 | taint | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:13 | taint | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:13 | taint | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint = ... obble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint = ... obble") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint = ... obble") | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint = ... obble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:9:7:35 | taint = ... obble") | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:19 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:19 | req | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:19 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:19 | req | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:25 | req.param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:25 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:25 | req.param | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:25 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:25 | req.param | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | exceptional return of req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | exceptional return of req.param("wobble") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | exceptional return of req.param("wobble") | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | exceptional return of req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | exceptional return of req.param("wobble") | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | req.param("wobble") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | req.param("wobble") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | req.param("wobble") | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | req.param("wobble") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:17:7:35 | req.param("wobble") | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:21:7:25 | param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:21:7:25 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:21:7:25 | param | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:21:7:25 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:21:7:25 | param | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | CalleeFlexibleAccessPath | req.param |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:7:27:7:34 | "wobble" | receiverName | req |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:7 | jwt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:7 | jwt | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:7 | jwt | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:7 | jwt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:7 | jwt | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:14 | jwt.verify | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:14 | jwt.verify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:14 | jwt.verify | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:14 | jwt.verify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:9:14 | jwt.verify | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | exceptional return of jwt.ver ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | exceptional return of jwt.ver ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | exceptional return of jwt.ver ... \\n    }) | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | exceptional return of jwt.ver ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | exceptional return of jwt.ver ... \\n    }) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | jwt.ver ... \\n    }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | jwt.ver ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | jwt.ver ... \\n    }) | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | jwt.ver ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:5:12:6 | jwt.ver ... \\n    }) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:9:9:14 | verify | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:9:9:14 | verify | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:9:9:14 | verify | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:9:9:14 | verify | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:9:9:14 | verify | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | CalleeFlexibleAccessPath | jwt.verify |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | calleeImports | jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:16:9:20 | taint | receiverName | jwt |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | CalleeFlexibleAccessPath | jwt.verify |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | calleeImports | jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:23:9:37 | 'my-secret-key' | receiverName | jwt |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | JSDOM | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | JSDOM | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | JSDOM | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | this | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:9:39 | this | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | 'arguments' object of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | exceptional return of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | exceptional return of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | jwt.verify |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | calleeImports | jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | functio ... ;\\n    } | receiverName | jwt |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | return of anonymous function | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:40:12:5 | return of anonymous function | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:50:9:52 | err | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:50:9:52 | err | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:50:9:52 | err | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:50:9:52 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:50:9:52 | err | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:9:55:9:61 | decoded | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | exceptional return of new JSD ... sly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | exceptional return of new JSD ... sly" }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | exceptional return of new JSD ... sly" }) | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | exceptional return of new JSD ... sly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | exceptional return of new JSD ... sly" }) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | new JSD ... sly" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | new JSD ... sly" }) | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | new JSD ... sly" }) | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | new JSD ... sly" }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:9:11:61 | new JSD ... sly" }) | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:13:11:17 | JSDOM | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:13:11:17 | JSDOM | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:13:11:17 | JSDOM | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:13:11:17 | JSDOM | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:13:11:17 | JSDOM | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:25 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:25 | decoded | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:25 | decoded | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:25 | decoded | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:25 | decoded | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:19:11:29 | decoded.foo | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:27:11:29 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:27:11:29 | foo | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:27:11:29 | foo | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:27:11:29 | foo | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:27:11:29 | foo | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:32:11:60 | { runSc ... usly" } | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:43 | runScripts | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:43 | runScripts | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:43 | runScripts | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:43 | runScripts | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:43 | runScripts | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:34:11:58 | runScri ... rously" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | CalleeFlexibleAccessPath | JSDOM |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | InputAccessPathFromCallee | ?.runScripts |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | assignedToPropName | runScripts |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | calleeImports | jsdom |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | contextSurroundingFunctionParameters | (req, res)\n(err, decoded) |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | enclosingFunctionBody | req res taint req param wobble jwt verify taint my-secret-key err decoded JSDOM decoded foo runScripts dangerously |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt-server.js:11:46:11:58 | "dangerously" | fileImports | express jsdom jsonwebtoken |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:0 | this | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:1 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:36 | import  ... ecode"; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:36 | import  ... ecode"; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:1:1:36 | import  ... ecode"; | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:8:1:17 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:1:24:1:35 | "jwt-decode" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:24:1:35 | "jwt-decode" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:1:24:1:35 | "jwt-decode" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:2:1:2:22 | import  ... jquery" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:1:2:22 | import  ... jquery" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:1:2:22 | import  ... jquery" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:2:8:2:8 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:2:15:2:22 | "jquery" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:15:2:22 | "jquery" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:2:15:2:22 | "jquery" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:1 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:1 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:6 | $.post | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:6 | $.post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:4:6 | $.post | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | $.post( ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | $.post( ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | $.post( ... NCY]\\n}) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | exceptional return of $.post( ... NCY]\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | exceptional return of $.post( ... NCY]\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:1:7:2 | exceptional return of $.post( ... NCY]\\n}) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:3:4:6 | post | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:3:4:6 | post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:3:4:6 | post | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:15 | loginUrl | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:15 | loginUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:15 | loginUrl | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | exceptional return of loginUrl() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | exceptional return of loginUrl() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | exceptional return of loginUrl() | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | CalleeFlexibleAccessPath | $.post |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | calleeImports | jquery |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:8:4:17 | loginUrl() | receiverName | $ |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | CalleeFlexibleAccessPath | $.post |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | calleeImports | jquery |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:20:4:32 | {data: "foo"} | receiverName | $ |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:24 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:24 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:24 | data | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:21:4:31 | data: "foo" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | CalleeFlexibleAccessPath | $.post |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | InputAccessPathFromCallee | 1.data |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | assignedToPropName | data |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | calleeImports | jquery |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:27:4:31 | "foo" | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | $ | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | $ | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | jwt_decode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | jwt_decode | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | jwt_decode | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:4:34 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | 'arguments' object of anonymous function | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | CalleeFlexibleAccessPath | $.post |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | calleeImports | jquery |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | (data,  ... ENCY]\\n} | receiverName | $ |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | exceptional return of anonymous function | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | exceptional return of anonymous function | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | exceptional return of anonymous function | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | return of anonymous function | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | return of anonymous function | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:35:7:1 | return of anonymous function | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:36:4:39 | data | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:4:42:4:44 | xhr | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:4:42:4:44 | xhr | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:4:42:4:44 | xhr | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:4:42:4:44 | xhr | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:4:42:4:44 | xhr | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:15 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:15 | decoded | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:15 | decoded | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:15 | decoded | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:15 | decoded | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded ... e(data) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded ... e(data) | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded ... e(data) | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded ... e(data) | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:9:5:34 | decoded ... e(data) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:28 | jwt_decode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:28 | jwt_decode | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:28 | jwt_decode | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:28 | jwt_decode | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:28 | jwt_decode | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | exceptional return of jwt_decode(data) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | exceptional return of jwt_decode(data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | exceptional return of jwt_decode(data) | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | exceptional return of jwt_decode(data) | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | exceptional return of jwt_decode(data) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | jwt_decode(data) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | jwt_decode(data) | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | jwt_decode(data) | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | jwt_decode(data) | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:19:5:34 | jwt_decode(data) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | CalleeFlexibleAccessPath | jwt_decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | calleeImports | jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:5:30:5:33 | data | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:5 | $ | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:5 | $ | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:5 | $ | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:5 | $ | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:12 | $.jGrowl | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:12 | $.jGrowl | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:12 | $.jGrowl | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:12 | $.jGrowl | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:12 | $.jGrowl | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | $.jGrowl(decoded) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | $.jGrowl(decoded) | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | $.jGrowl(decoded) | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | $.jGrowl(decoded) | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | $.jGrowl(decoded) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | exceptional return of $.jGrowl(decoded) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | exceptional return of $.jGrowl(decoded) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | exceptional return of $.jGrowl(decoded) | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | exceptional return of $.jGrowl(decoded) | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:5:6:21 | exceptional return of $.jGrowl(decoded) | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:7:6:12 | jGrowl | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:7:6:12 | jGrowl | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:6:7:6:12 | jGrowl | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:7:6:12 | jGrowl | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:7:6:12 | jGrowl | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | CalleeFlexibleAccessPath | $.jGrowl |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | calleeImports | jquery |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | contextSurroundingFunctionParameters | (data, xhr) |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | enclosingFunctionBody | data xhr decoded jwt_decode data $ jGrowl decoded |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | enclosingFunctionName | $.post#functionalargument |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | fileImports | jquery jwt-decode |
| autogenerated/Xss/DomBasedXss/jwt.js:6:14:6:20 | decoded | receiverName | $ |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:0 | this | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | backend | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | backend | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | backend | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | nodemailer | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | nodemailer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | nodemailer | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:1:1:1 | require | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:14 | nodemailer | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:14 | nodemailer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:14 | nodemailer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:14 | nodemailer | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemai ... ailer') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemai ... ailer') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemai ... ailer') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemailer | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemailer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:5:1:38 | nodemailer | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:24 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:24 | require | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | exceptional return of require ... ailer') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | exceptional return of require ... ailer') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | exceptional return of require ... ailer') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | require ... ailer') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | require ... ailer') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:18:1:38 | require ... ailer') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:1:26:1:37 | 'nodemailer' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:11 | express | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:5:2:32 | express ... press') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:21 | require | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | exceptional return of require('express') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:15:2:32 | require('express') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:2:23:2:31 | 'express' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:7 | app | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:5:3:19 | app = express() | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:17 | express | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | exceptional return of express() | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:3:11:3:19 | express() | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:11 | backend | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:11 | backend | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:11 | backend | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:11 | backend | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend ... ckend') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend ... ckend') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:5:4:34 | backend ... ckend') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:21 | require | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | exceptional return of require('./backend') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | exceptional return of require('./backend') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | exceptional return of require('./backend') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | require('./backend') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | require('./backend') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:15:4:34 | require('./backend') | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:4:23:4:33 | './backend' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:3 | app | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:6:8 | app.post | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | app.pos ...  });\\n}) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | exceptional return of app.pos ...  });\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | exceptional return of app.pos ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:1:15:2 | exceptional return of app.pos ...  });\\n}) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:5:6:8 | post | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:5:6:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:5:6:8 | post | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | calleeImports | express |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:10:6:27 | '/private_message' | receiverName | app |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | backend | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | backend | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | backend | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | backend | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | backend | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | nodemailer | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | nodemailer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | nodemailer | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | nodemailer | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:6:29 | nodemailer | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | 'arguments' object of anonymous function | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | calleeImports | express |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | (req, r ...   });\\n} | receiverName | app |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | exceptional return of anonymous function | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | return of anonymous function | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:30:15:1 | return of anonymous function | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:31:6:33 | req | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:36:6:38 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:36:6:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:36:6:38 | res | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:36:6:38 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:6:36:6:38 | res | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:15 | transport | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:15 | transport | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:15 | transport | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:15 | transport | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:15 | transport | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transpo ... ort({}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transpo ... ort({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transpo ... ort({}) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transpo ... ort({}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transpo ... ort({}) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transport | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transport | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transport | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transport | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:7:7:48 | transport | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:28 | nodemailer | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:28 | nodemailer | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:28 | nodemailer | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:28 | nodemailer | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:28 | nodemailer | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:44 | nodemai ... ansport | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:44 | nodemai ... ansport | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:44 | nodemai ... ansport | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:44 | nodemai ... ansport | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:44 | nodemai ... ansport | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | exceptional return of nodemai ... ort({}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | exceptional return of nodemai ... ort({}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | exceptional return of nodemai ... ort({}) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | exceptional return of nodemai ... ort({}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | exceptional return of nodemai ... ort({}) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | nodemai ... ort({}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | nodemai ... ort({}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | nodemai ... ort({}) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | nodemai ... ort({}) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:19:7:48 | nodemai ... ort({}) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:30:7:44 | createTransport | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:30:7:44 | createTransport | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:30:7:44 | createTransport | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:30:7:44 | createTransport | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:30:7:44 | createTransport | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | CalleeFlexibleAccessPath | nodemailer.createTransport |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:7:46:7:47 | {} | receiverName | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:11 | transport | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:11 | transport | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:11 | transport | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:11 | transport | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:11 | transport | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:20 | transport.sendMail | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:20 | transport.sendMail | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:20 | transport.sendMail | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:20 | transport.sendMail | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:8:20 | transport.sendMail | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | exceptional return of transpo ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | exceptional return of transpo ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | exceptional return of transpo ... OK\\n  }) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | exceptional return of transpo ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | exceptional return of transpo ... OK\\n  }) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | transpo ... OK\\n  }) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | transpo ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | transpo ... OK\\n  }) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | transpo ... OK\\n  }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:3:14:4 | transpo ... OK\\n  }) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:13:8:20 | sendMail | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:13:8:20 | sendMail | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:13:8:20 | sendMail | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:13:8:20 | sendMail | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:13:8:20 | sendMail | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:8:22:14:3 | {\\n    f ...  OK\\n  } | receiverName | transport |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:8 | from | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:8 | from | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:8 | from | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:8 | from | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:8 | from | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:5:9:33 | from: ' ... le.com' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | InputAccessPathFromCallee | 0.from |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | assignedToPropName | from |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:9:11:9:33 | 'webmas ... le.com' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:6 | to | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:6 | to | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:6 | to | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:6 | to | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:6 | to | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:5:10:48 | to: bac ... ceiver) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:15 | backend | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:15 | backend | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:15 | backend | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:15 | backend | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:15 | backend | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:28 | backend.getUserEmail | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:28 | backend.getUserEmail | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:28 | backend.getUserEmail | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:28 | backend.getUserEmail | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:28 | backend.getUserEmail | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | InputAccessPathFromCallee | 0.to |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | assignedToPropName | to |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | backend ... ceiver) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | exceptional return of backend ... ceiver) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | exceptional return of backend ... ceiver) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | exceptional return of backend ... ceiver) | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | exceptional return of backend ... ceiver) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:9:10:48 | exceptional return of backend ... ceiver) | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:17:10:28 | getUserEmail | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:17:10:28 | getUserEmail | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:17:10:28 | getUserEmail | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:17:10:28 | getUserEmail | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:17:10:28 | getUserEmail | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:32 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:32 | req | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:32 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:32 | req | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:38 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:38 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:38 | req.query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:38 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:38 | req.query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | CalleeFlexibleAccessPath | backend.getUserEmail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | calleeImports | ./backend |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:30:10:47 | req.query.receiver | receiverName | backend |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:34:10:38 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:34:10:38 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:34:10:38 | query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:34:10:38 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:34:10:38 | query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:40:10:47 | receiver | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:40:10:47 | receiver | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:40:10:47 | receiver | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:40:10:47 | receiver | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:10:40:10:47 | receiver | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:11 | subject | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:11 | subject | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:11 | subject | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:11 | subject | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:11 | subject | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:5:11:30 | subject ... essage' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | InputAccessPathFromCallee | 0.subject |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | assignedToPropName | subject |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:11:14:11:30 | 'Private message' | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:8 | text | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:8 | text | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:8 | text | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:8 | text | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:8 | text | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:5:12:69 | text: ` ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | InputAccessPathFromCallee | 0.text |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | assignedToPropName | text |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:11:12:69 | `Hi, yo ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:12:12:47 | Hi, you ... meone.  | stringConcatenatedWith |  -endpoint- req.query.message + '.' |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:52 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:52 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:52 | req | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:52 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:52 | req | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:58 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:58 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:58 | req.query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:58 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:58 | req.query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:50:12:66 | req.query.message | stringConcatenatedWith | 'Hi, you got a message from someone. ' -endpoint- '.' |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:54:12:58 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:54:12:58 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:54:12:58 | query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:54:12:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:54:12:58 | query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:60:12:66 | message | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:60:12:66 | message | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:60:12:66 | message | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:60:12:66 | message | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:60:12:66 | message | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:12:68:12:68 | . | stringConcatenatedWith | 'Hi, you got a message from someone. ' + req.query.message -endpoint-  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:8 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:8 | html | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:8 | html | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:8 | html | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:8 | html | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:5:13:69 | html: ` ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | CalleeFlexibleAccessPath | transport.sendMail |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | calleeImports | nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:12:13:47 | Hi, you ... meone.  | stringConcatenatedWith |  -endpoint- req.query.message + '.' |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:52 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:52 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:52 | req | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:52 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:52 | req | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:58 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:58 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:58 | req.query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:58 | req.query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:58 | req.query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:50:13:66 | req.query.message | stringConcatenatedWith | 'Hi, you got a message from someone. ' -endpoint- '.' |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:54:13:58 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:54:13:58 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:54:13:58 | query | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:54:13:58 | query | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:54:13:58 | query | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:60:13:66 | message | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:60:13:66 | message | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:60:13:66 | message | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:60:13:66 | message | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:60:13:66 | message | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | enclosingFunctionBody | req res transport nodemailer createTransport transport sendMail from webmaster@example.com to backend getUserEmail req query receiver subject Private message text Hi, you got a message from someone.  req query message . html Hi, you got a message from someone.  req query message . |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | fileImports | ./backend express nodemailer |
| autogenerated/Xss/DomBasedXss/nodemailer.js:13:68:13:68 | . | stringConcatenatedWith | 'Hi, you got a message from someone. ' + req.query.message -endpoint-  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | 'arguments' object of function test | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | 'arguments' object of function test | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | exceptional return of function test | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | exceptional return of function test | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | functio ... K\\n  }\\n} | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | functio ... K\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | functio ... K\\n  }\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | return of function test | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | return of function test | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:1:23:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:10:1:13 | test | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:1:10:1:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:12 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:12 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:12 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:12 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target  ... .search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target  ... .search | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target  ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:7:2:39 | target  ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:23 | document | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:23 | document | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:23 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:32 | document.location | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:32 | document.location | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:32 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:39 | documen ... .search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:39 | documen ... .search | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:39 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:16:2:39 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:25:2:32 | location | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:25:2:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:25:2:32 | location | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:25:2:32 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:25:2:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:34:2:39 | search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:34:2:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:34:2:39 | search | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:34:2:39 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:2:34:2:39 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:3 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | $('myId ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | exceptional return of $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | exceptional return of $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:3:4:64 | exceptional return of $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:5:4:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:13:4:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:13:4:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:13:4:16 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:13:4:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:13:4:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:25 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:25 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:25 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:25 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:25 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:18:4:63 | sanitiz ...  target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:37 | DOMPurify | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:37 | DOMPurify | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:37 | DOMPurify | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:37 | DOMPurify | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:37 | DOMPurify | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:46 | DOMPurify.sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:46 | DOMPurify.sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:46 | DOMPurify.sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:46 | DOMPurify.sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:46 | DOMPurify.sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | DOMPuri ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | DOMPuri ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | DOMPuri ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | DOMPuri ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | DOMPuri ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | exceptional return of DOMPuri ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | exceptional return of DOMPuri ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | exceptional return of DOMPuri ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | exceptional return of DOMPuri ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:29:4:54 | exceptional return of DOMPuri ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:39:4:46 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:39:4:46 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:39:4:46 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:39:4:46 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:39:4:46 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:58:4:63 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:58:4:63 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:58:4:63 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:58:4:63 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:4:58:4:63 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:3 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | $('myId ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | exceptional return of $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | exceptional return of $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:3:6:24 | exceptional return of $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:5:6:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:13:6:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:13:6:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:13:6:16 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:13:6:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:13:6:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:6:18:6:23 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:13 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:13 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:13 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:13 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:13 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted = target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted = target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted = target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted = target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:7:8:22 | tainted = target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:17:8:22 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:17:8:22 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:17:8:22 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:17:8:22 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:8:17:8:22 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:3 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | $('myId ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | $('myId ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | $('myId ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | $('myId ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | $('myId ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | exceptional return of $('myId ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | exceptional return of $('myId ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | exceptional return of $('myId ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | exceptional return of $('myId ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:3:9:25 | exceptional return of $('myId ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:5:9:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:13:9:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:13:9:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:13:9:16 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:13:9:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:13:9:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:9:18:9:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:10:7:10:14 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:10:7:10:14 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:10:7:10:14 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:10:7:10:14 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:10:7:10:14 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:11 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:11 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:11 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:11 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:11 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:5:11:41 | tainted ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:23 | DOMPurify | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:23 | DOMPurify | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:23 | DOMPurify | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:23 | DOMPurify | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:23 | DOMPurify | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:32 | DOMPurify.sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:32 | DOMPurify.sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:32 | DOMPurify.sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:32 | DOMPurify.sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:32 | DOMPurify.sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | DOMPuri ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | DOMPuri ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | DOMPuri ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | DOMPuri ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | DOMPuri ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | exceptional return of DOMPuri ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | exceptional return of DOMPuri ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | exceptional return of DOMPuri ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | exceptional return of DOMPuri ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:15:11:41 | exceptional return of DOMPuri ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:25:11:32 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:25:11:32 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:25:11:32 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:25:11:32 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:11:25:11:32 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:3 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | $('myId ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | $('myId ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | $('myId ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | $('myId ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | $('myId ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | exceptional return of $('myId ... ainted) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | exceptional return of $('myId ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | exceptional return of $('myId ... ainted) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | exceptional return of $('myId ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:3:13:25 | exceptional return of $('myId ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:5:13:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:13:13:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:13:13:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:13:13:16 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:13:13:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:13:13:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:13:18:13:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:7 | inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:7 | inner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:7 | inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:7 | inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:7 | inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | exceptional return of inner(target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | exceptional return of inner(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | exceptional return of inner(target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | exceptional return of inner(target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | exceptional return of inner(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | inner(target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | inner(target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | inner(target) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | inner(target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:3:15:15 | inner(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:15:9:15:14 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:16:2 | this | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:16:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:16:2 | this | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:16:2 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:16:2 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | 'arguments' object of function inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | 'arguments' object of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | 'arguments' object of function inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | 'arguments' object of function inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | 'arguments' object of function inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | exceptional return of function inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | exceptional return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | exceptional return of function inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | exceptional return of function inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | exceptional return of function inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | functio ...  OK\\n  } | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | functio ...  OK\\n  } | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | functio ...  OK\\n  } | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | functio ...  OK\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | return of function inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | return of function inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | return of function inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:3:22:3 | return of function inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:12:16:16 | inner | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:16:18:16:18 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:5 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:5 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:5 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | $('myId') | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:18 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:18 | $('myId').html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:18 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:18 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | $('myId').html(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | $('myId').html(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | $('myId').html(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | $('myId').html(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | $('myId').html(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | exceptional return of $('myId').html(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | exceptional return of $('myId').html(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | exceptional return of $('myId').html(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | exceptional return of $('myId').html(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:5:17:21 | exceptional return of $('myId').html(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:7:17:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:15:17:18 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:15:17:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:15:17:18 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:15:17:18 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:15:17:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:17:20:17:20 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:18:9:18:16 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:18:9:18:16 | sanitize | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:18:9:18:16 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:18:9:18:16 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:18:9:18:16 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:7 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:7 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:7 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:7 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x = DOM ... tize(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x = DOM ... tize(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x = DOM ... tize(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x = DOM ... tize(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:7:19:31 | x = DOM ... tize(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:19 | DOMPurify | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:19 | DOMPurify | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:19 | DOMPurify | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:19 | DOMPurify | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:19 | DOMPurify | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:28 | DOMPurify.sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:28 | DOMPurify.sanitize | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:28 | DOMPurify.sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:28 | DOMPurify.sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:28 | DOMPurify.sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | DOMPuri ... tize(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | DOMPuri ... tize(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | DOMPuri ... tize(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | DOMPuri ... tize(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | DOMPuri ... tize(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | exceptional return of DOMPuri ... tize(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | exceptional return of DOMPuri ... tize(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | exceptional return of DOMPuri ... tize(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | exceptional return of DOMPuri ... tize(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:11:19:31 | exceptional return of DOMPuri ... tize(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:21:19:28 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:21:19:28 | sanitize | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:21:19:28 | sanitize | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:21:19:28 | sanitize | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:19:21:19:28 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | $ | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:5 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | $('myId') | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:18 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:18 | $('myId').html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:18 | $('myId').html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:18 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | $('myId').html(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | $('myId').html(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | $('myId').html(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | $('myId').html(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | $('myId').html(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | exceptional return of $('myId').html(x) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | exceptional return of $('myId').html(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | exceptional return of $('myId').html(x) | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | exceptional return of $('myId').html(x) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:5:21:21 | exceptional return of $('myId').html(x) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:7:21:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:15:21:18 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:15:21:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:15:21:18 | html | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:15:21:18 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:15:21:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | enclosingFunctionBody | target document location search $ myId html sanitize DOMPurify sanitize target target $ myId html target tainted target $ myId html tainted sanitize tainted DOMPurify sanitize tainted $ myId html tainted inner target inner x $ myId html x sanitize x DOMPurify sanitize x $ myId html x |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:21:20:21:20 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:25:0 | this | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:25:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:25:0 | this | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:25:0 | this | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:25:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | 'arguments' object of function badSanitizer | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | 'arguments' object of function badSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | 'arguments' object of function badSanitizer | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | 'arguments' object of function badSanitizer | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | 'arguments' object of function badSanitizer | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | exceptional return of function badSanitizer | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | exceptional return of function badSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | exceptional return of function badSanitizer | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | exceptional return of function badSanitizer | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | exceptional return of function badSanitizer | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | functio ... OT OK\\n} | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | return of function badSanitizer | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | return of function badSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | return of function badSanitizer | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | return of function badSanitizer | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:1:46:1 | return of function badSanitizer | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:10:25:21 | badSanitizer | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:10:25:21 | badSanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:25:10:25:21 | badSanitizer | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:12 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:12 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:12 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:12 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target  ... .search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target  ... .search | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target  ... .search | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:7:26:39 | target  ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:23 | document | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:23 | document | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:23 | document | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:32 | document.location | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:32 | document.location | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:32 | document.location | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:39 | documen ... .search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:39 | documen ... .search | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:39 | documen ... .search | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:16:26:39 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:25:26:32 | location | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:25:26:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:25:26:32 | location | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:25:26:32 | location | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:25:26:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:34:26:39 | search | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:34:26:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:34:26:39 | search | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:34:26:39 | search | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:26:34:26:39 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:28:2 | this | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:28:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:28:2 | this | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:28:2 | this | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:28:2 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | 'arguments' object of function sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | 'arguments' object of function sanitizeBad | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | 'arguments' object of function sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | 'arguments' object of function sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | 'arguments' object of function sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | exceptional return of function sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | exceptional return of function sanitizeBad | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | exceptional return of function sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | exceptional return of function sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | exceptional return of function sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | functio ... on;\\n  } | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | functio ... on;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | functio ... on;\\n  } | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | functio ... on;\\n  } | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | functio ... on;\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | return of function sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | return of function sanitizeBad | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | return of function sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | return of function sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:3:30:3 | return of function sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:12:28:22 | sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:28:24:28:24 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:29:12:29:12 | x | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:29:12:29:12 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:29:12:29:12 | x | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:29:12:29:12 | x | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:29:12:29:12 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:14 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:14 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:14 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:14 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:14 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 = target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 = target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 = target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 = target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:7:31:23 | tainted2 = target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:18:31:23 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:18:31:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:18:31:23 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:18:31:23 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:31:18:31:23 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:3 | $ | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:3 | $ | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | exceptional return of $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:16 | $('myId').html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:16 | $('myId').html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | $('myId ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | $('myId ... inted2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | $('myId ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | $('myId ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | $('myId ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | exceptional return of $('myId ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | exceptional return of $('myId ... inted2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | exceptional return of $('myId ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | exceptional return of $('myId ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:3:32:26 | exceptional return of $('myId ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:5:32:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:13:32:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:13:32:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:13:32:16 | html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:13:32:16 | html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:13:32:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:32:18:32:25 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:33:7:33:14 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:33:7:33:14 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:33:7:33:14 | sanitize | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:33:7:33:14 | sanitize | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:33:7:33:14 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:12 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:12 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:12 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:12 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:12 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted ... inted2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:5:34:36 | tainted ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:26 | sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:26 | sanitizeBad | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:26 | sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:26 | sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:26 | sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | exceptional return of sanitiz ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | exceptional return of sanitiz ... inted2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | exceptional return of sanitiz ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | exceptional return of sanitiz ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | exceptional return of sanitiz ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | CalleeFlexibleAccessPath | sanitizeBad |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:34:28:34:35 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | $ | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | $ | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | tainted2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:3 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | exceptional return of $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:16 | $('myId').html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:16 | $('myId').html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | $('myId ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | $('myId ... inted2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | $('myId ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | $('myId ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | $('myId ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | exceptional return of $('myId ... inted2) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | exceptional return of $('myId ... inted2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | exceptional return of $('myId ... inted2) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | exceptional return of $('myId ... inted2) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:3:36:26 | exceptional return of $('myId ... inted2) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:5:36:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:13:36:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:13:36:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:13:36:16 | html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:13:36:16 | html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:13:36:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:36:18:36:25 | tainted2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:14 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:14 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:14 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:14 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:14 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 = target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 = target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 = target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 = target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:7:38:23 | tainted3 = target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:18:38:23 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:18:38:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:18:38:23 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:18:38:23 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:38:18:38:23 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:3 | $ | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:3 | $ | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | exceptional return of $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:16 | $('myId').html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:16 | $('myId').html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | $('myId ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | $('myId ... inted3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | $('myId ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | $('myId ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | $('myId ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | exceptional return of $('myId ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | exceptional return of $('myId ... inted3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | exceptional return of $('myId ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | exceptional return of $('myId ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:3:39:26 | exceptional return of $('myId ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:5:39:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:13:39:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:13:39:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:13:39:16 | html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:13:39:16 | html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:13:39:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:39:18:39:25 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:40:7:40:14 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:40:7:40:14 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:40:7:40:14 | sanitize | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:40:7:40:14 | sanitize | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:40:7:40:14 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:12 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:12 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:12 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:12 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:12 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted ... inted3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:5:41:36 | tainted ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:26 | sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:26 | sanitizeBad | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:26 | sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:26 | sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:26 | sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | exceptional return of sanitiz ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | exceptional return of sanitiz ... inted3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | exceptional return of sanitiz ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | exceptional return of sanitiz ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | exceptional return of sanitiz ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | CalleeFlexibleAccessPath | sanitizeBad |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:41:28:41:35 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | $ | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | $ | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | tainted3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:3 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | exceptional return of $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:16 | $('myId').html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:16 | $('myId').html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | $('myId ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | $('myId ... inted3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | $('myId ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | $('myId ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | $('myId ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | exceptional return of $('myId ... inted3) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | exceptional return of $('myId ... inted3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | exceptional return of $('myId ... inted3) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | exceptional return of $('myId ... inted3) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:3:43:26 | exceptional return of $('myId ... inted3) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:5:43:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:13:43:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:13:43:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:13:43:16 | html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:13:43:16 | html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:13:43:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:43:18:43:25 | tainted3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:3 | $ | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:3 | $ | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:3 | $ | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | exceptional return of $('myId') | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | exceptional return of $('myId') | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:11 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:16 | $('myId').html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:16 | $('myId').html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:16 | $('myId').html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:16 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | $('myId ... target) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | $('myId ... target) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | exceptional return of $('myId ... target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | exceptional return of $('myId ... target) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:3:45:57 | exceptional return of $('myId ... target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:5:45:10 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:13:45:16 | html | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:13:45:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:13:45:16 | html | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:13:45:16 | html | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:13:45:16 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:25 | sanitize | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:25 | sanitize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:25 | sanitize | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:25 | sanitize | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:25 | sanitize | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:18:45:56 | sanitiz ...  target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:39 | sanitizeBad | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:39 | sanitizeBad | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:39 | sanitizeBad | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:39 | sanitizeBad | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:39 | sanitizeBad | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | exceptional return of sanitizeBad(target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | exceptional return of sanitizeBad(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | exceptional return of sanitizeBad(target) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | exceptional return of sanitizeBad(target) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | exceptional return of sanitizeBad(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | CalleeFlexibleAccessPath | sanitizeBad |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:41:45:46 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:51:45:56 | target | contextFunctionInterfaces | badSanitizer()\ninner(x)\nsanitizeBad(x)\ntest() |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:51:45:56 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:51:45:56 | target | enclosingFunctionBody | target document location search sanitizeBad x x tainted2 target $ myId html tainted2 sanitize tainted2 sanitizeBad tainted2 $ myId html tainted2 tainted3 target $ myId html tainted3 sanitize tainted3 sanitizeBad tainted3 $ myId html tainted3 $ myId html sanitize sanitizeBad target target |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:51:45:56 | target | enclosingFunctionName | badSanitizer |
| autogenerated/Xss/DomBasedXss/optionalSanitizer.js:45:51:45:56 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:38 | import  ... react'; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:38 | import  ... react'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:1:1:38 | import  ... react'; | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:10:1:22 | createContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:31:1:37 | 'react' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:31:1:37 | 'react' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:1:31:1:37 | 'react' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:20 | MyContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:20 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:20 | MyContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:50 | MyConte ...  null}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:50 | MyConte ...  null}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:12:3:50 | MyConte ...  null}) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:36 | createContext | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:36 | createContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:36 | createContext | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | createC ...  null}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | createC ...  null}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | createC ...  null}) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | exceptional return of createC ...  null}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | exceptional return of createC ...  null}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:24:3:50 | exceptional return of createC ...  null}) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | CalleeFlexibleAccessPath | createContext |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:38:3:49 | {root: null} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:42 | root | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:42 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:42 | root | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:39:3:48 | root: null | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | CalleeFlexibleAccessPath | createContext |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | InputAccessPathFromCallee | 0.root |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | assignedToPropName | root |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-create-context.js:3:45:3:48 | null | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:0 | this | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:1 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:1 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:1 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:30 | import  ... press'; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:30 | import  ... press'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:1:1:30 | import  ... press'; | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:8:1:14 | express | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:1:21:1:29 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:21:1:29 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:1:21:1:29 | 'express' | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:1:2:39 | import  ... ative'; | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:1:2:39 | import  ... ative'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:1:2:39 | import  ... ative'; | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:10:2:16 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:2:25:2:38 | 'react-native' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:25:2:38 | 'react-native' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:2:25:2:38 | 'react-native' | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:7 | app | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:5:4:19 | app = express() | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:17 | express | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | exceptional return of express() | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:4:11:4:19 | express() | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:3 | app | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:6:7 | app.get | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | app.get ... T OK\\n}) | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:1:10:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:5:6:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:5:6:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:5:6:7 | get | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | calleeImports | express |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:9:6:20 | '/some/path' | receiverName | app |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | WebView | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | WebView | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | WebView | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | this | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:6:22 | this | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | 'arguments' object of anonymous function | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | exceptional return of anonymous function | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | return of anonymous function | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:23:10:1 | return of anonymous function | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:32:6:34 | req | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:6:37:6:39 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:6:37:6:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:6:37:6:39 | res | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:6:37:6:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:6:37:6:39 | res | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:13 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:13 | tainted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:13 | tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:13 | tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:13 | tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted ... "code") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted ... "code") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted ... "code") | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted ... "code") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:7:7:33 | tainted ... "code") | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:19 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:19 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:19 | req | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:19 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:19 | req | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:25 | req.param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:25 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:25 | req.param | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:25 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:25 | req.param | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | exceptional return of req.param("code") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | exceptional return of req.param("code") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | exceptional return of req.param("code") | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | exceptional return of req.param("code") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | exceptional return of req.param("code") | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | req.param("code") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | req.param("code") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | req.param("code") | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | req.param("code") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:17:7:33 | req.param("code") | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:21:7:25 | param | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:21:7:25 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:21:7:25 | param | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:21:7:25 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:21:7:25 | param | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | CalleeFlexibleAccessPath | req.param |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:7:27:7:32 | "code" | receiverName | req |
| autogenerated/Xss/DomBasedXss/react-native.js:8:3:8:27 | <WebVie ... nted}/> | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:3:8:27 | <WebVie ... nted}/> | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:8:3:8:27 | <WebVie ... nted}/> | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:3:8:27 | <WebVie ... nted}/> | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:3:8:27 | <WebVie ... nted}/> | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:8:4:8:10 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:4:8:10 | WebView | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:8:4:8:10 | WebView | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:4:8:10 | WebView | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:4:8:10 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:15 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:15 | html | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:15 | html | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:15 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:15 | html | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:8:12:8:25 | html={tainted} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:8:18:8:24 | tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:3:9:37 | <WebVie ... ted}}/> | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:3:9:37 | <WebVie ... ted}}/> | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:3:9:37 | <WebVie ... ted}}/> | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:3:9:37 | <WebVie ... ted}}/> | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:3:9:37 | <WebVie ... ted}}/> | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:4:9:10 | WebView | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:4:9:10 | WebView | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:4:9:10 | WebView | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:4:9:10 | WebView | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:4:9:10 | WebView | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:17 | source | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:17 | source | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:17 | source | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:17 | source | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:17 | source | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:12:9:35 | source= ... inted}} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | assignedToPropName | source |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:20:9:34 | {html: tainted} | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:24 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:24 | html | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:24 | html | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:24 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:24 | html | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:21:9:33 | html: tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | enclosingFunctionBody | req res tainted req param code WebView html tainted WebView source html tainted |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/DomBasedXss/react-native.js:9:27:9:33 | tainted | fileImports | express react-native |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:0 | this | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:0 | this | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:1 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:1 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:1 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:51 | import  ... ntext'; | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:51 | import  ... ntext'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:1:1:51 | import  ... ntext'; | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:10:1:18 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:27:1:50 | './reac ... ontext' | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:27:1:50 | './reac ... ontext' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:1:27:1:50 | './reac ... ontext' | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | MyContext | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | MyContext | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | this | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | this | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | this | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:3:7 | this | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | 'arguments' object of function renderMain | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | 'arguments' object of function renderMain | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | 'arguments' object of function renderMain | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | 'arguments' object of function renderMain | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | 'arguments' object of function renderMain | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | exceptional return of function renderMain | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | exceptional return of function renderMain | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | exceptional return of function renderMain | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | exceptional return of function renderMain | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | exceptional return of function renderMain | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | functio ... ider>\\n} | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | functio ... ider>\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | functio ... ider>\\n} | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | return of function renderMain | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | return of function renderMain | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | return of function renderMain | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | return of function renderMain | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:8:5:1 | return of function renderMain | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:17:3:26 | renderMain | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:17:3:26 | renderMain | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:3:17:3:26 | renderMain | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:12:4:82 | <MyCont ... ovider> | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:12:4:82 | <MyCont ... ovider> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:12:4:82 | <MyCont ... ovider> | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:12:4:82 | <MyCont ... ovider> | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:12:4:82 | <MyCont ... ovider> | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:21 | MyContext | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:21 | MyContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:21 | MyContext | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:21 | MyContext | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:21 | MyContext | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:30 | MyContext.Provider | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:30 | MyContext.Provider | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:30 | MyContext.Provider | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:30 | MyContext.Provider | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:13:4:30 | MyContext.Provider | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:23:4:30 | Provider | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:23:4:30 | Provider | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:23:4:30 | Provider | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:23:4:30 | Provider | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:23:4:30 | Provider | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:36 | value | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:36 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:36 | value | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:36 | value | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:36 | value | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:32:4:60 | value={ ... .body}} | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | assignedToPropName | value |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:39:4:59 | {root:  ... t.body} | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:43 | root | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:43 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:43 | root | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:43 | root | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:43 | root | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:40:4:58 | root: document.body | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:53 | document | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:53 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:53 | document | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:53 | document | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:53 | document | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | assignedToPropName | root |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:46:4:58 | document.body | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:55:4:58 | body | contextFunctionInterfaces | renderMain() |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:55:4:58 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:55:4:58 | body | enclosingFunctionBody | MyContext Provider value root document body |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:55:4:58 | body | enclosingFunctionName | renderMain |
| autogenerated/Xss/DomBasedXss/react-provide-context.js:4:55:4:58 | body | fileImports | ./react-create-context |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:0 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:0 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:1 | useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:46 | import  ... react'; | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:46 | import  ... react'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:1:1:46 | import  ... react'; | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:10:1:19 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:22:1:30 | Component | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:39:1:45 | 'react' | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:39:1:45 | 'react' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:1:39:1:45 | 'react' | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:1:2:51 | import  ... ntext'; | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:1:2:51 | import  ... ntext'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:1:2:51 | import  ... ntext'; | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:10:2:18 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:27:2:50 | './reac ... ontext' | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:27:2:50 | './reac ... ontext' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:2:27:2:50 | './reac ... ontext' | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | MyContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | MyContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | this | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | this | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | useContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | useContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | useContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:4:0 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | 'arguments' object of function useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | 'arguments' object of function useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | 'arguments' object of function useMyContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | 'arguments' object of function useMyContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | 'arguments' object of function useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | exceptional return of function useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | exceptional return of function useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | exceptional return of function useMyContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | exceptional return of function useMyContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | exceptional return of function useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | functio ... ext);\\n} | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | functio ... ext);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | functio ... ext);\\n} | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | return of function useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | return of function useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | return of function useMyContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | return of function useMyContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:1:6:1 | return of function useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:4:10:4:21 | useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:21 | useContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:21 | useContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:21 | useContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:21 | useContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:21 | useContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | exceptional return of useCont ... ontext) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | exceptional return of useCont ... ontext) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | exceptional return of useCont ... ontext) | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | exceptional return of useCont ... ontext) | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | exceptional return of useCont ... ontext) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | useCont ... ontext) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | useCont ... ontext) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | useCont ... ontext) | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | useCont ... ontext) | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:12:5:32 | useCont ... ontext) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | CalleeFlexibleAccessPath | useContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | enclosingFunctionBody | useContext MyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | enclosingFunctionName | useMyContext |
| autogenerated/Xss/DomBasedXss/react-use-context.js:5:23:5:31 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | this | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | this | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | useMyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | useMyContext | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | useMyContext | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:8:7 | useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | 'arguments' object of function useDoc1 | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | 'arguments' object of function useDoc1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | 'arguments' object of function useDoc1 | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | 'arguments' object of function useDoc1 | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | 'arguments' object of function useDoc1 | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | exceptional return of function useDoc1 | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | exceptional return of function useDoc1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | exceptional return of function useDoc1 | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | exceptional return of function useDoc1 | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | exceptional return of function useDoc1 | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | functio ... OT OK\\n} | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | functio ... OT OK\\n} | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | return of function useDoc1 | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | return of function useDoc1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | return of function useDoc1 | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | return of function useDoc1 | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:8:11:1 | return of function useDoc1 | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:17:8:23 | useDoc1 | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:17:8:23 | useDoc1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:8:17:8:23 | useDoc1 | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:16 | { root } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:16 | { root } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:16 | { root } | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:16 | { root } | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:16 | { root } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | { root  ... ntext() | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | { root  ... ntext() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | { root  ... ntext() | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | { root  ... ntext() | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:9:9:33 | { root  ... ntext() | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:11:9:14 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:31 | useMyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:31 | useMyContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:31 | useMyContext | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:31 | useMyContext | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:31 | useMyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | exceptional return of useMyContext() | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | exceptional return of useMyContext() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | exceptional return of useMyContext() | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | exceptional return of useMyContext() | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | exceptional return of useMyContext() | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | useMyContext() | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | useMyContext() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | useMyContext() | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | useMyContext() | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:9:20:9:33 | useMyContext() | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:8 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:8 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:8 | root | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:8 | root | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:8 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:20 | root.appendChild | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:20 | root.appendChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:20 | root.appendChild | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:20 | root.appendChild | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:20 | root.appendChild | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | exceptional return of root.ap ... w.name) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | exceptional return of root.ap ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | exceptional return of root.ap ... w.name) | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | exceptional return of root.ap ... w.name) | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | exceptional return of root.ap ... w.name) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | root.ap ... w.name) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | root.ap ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | root.ap ... w.name) | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | root.ap ... w.name) | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:5:10:33 | root.ap ... w.name) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:10:10:20 | appendChild | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:10:10:20 | appendChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:10:10:20 | appendChild | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:10:10:20 | appendChild | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:10:10:20 | appendChild | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:27 | window | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:27 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:27 | window | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:27 | window | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:27 | window | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | CalleeFlexibleAccessPath | root.appendChild |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:22:10:32 | window.name | receiverName | root |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:29:10:32 | name | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:29:10:32 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:29:10:32 | name | enclosingFunctionBody | root useMyContext root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:29:10:32 | name | enclosingFunctionName | useDoc1 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:10:29:10:32 | name | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | class C ...     }\\n} | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | class C ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:1:18:1 | class C ...     }\\n} | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:7:13:7 | C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:7:13:7 | C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:7:13:7 | C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:17:13:25 | Component | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:17:13:25 | Component | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:17:13:25 | Component | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | 'arguments' object of default constructor of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | 'arguments' object of default constructor of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | 'arguments' object of default constructor of class C | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | 'arguments' object of default constructor of class C | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | 'arguments' object of default constructor of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | (...arg ... rgs); } | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | (...arg ... rgs); } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | (...arg ... rgs); } | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | (...arg ... rgs); } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | ...args | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | ...args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | ...args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | ...args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | ...args | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | args | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constru ... rgs); } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constructor | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | constructor | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of default constructor of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of default constructor of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of default constructor of class C | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of default constructor of class C | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of default constructor of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of super(...args) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of super(...args) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of super(...args) | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of super(...args) | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | exceptional return of super(...args) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | return of default constructor of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | return of default constructor of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | return of default constructor of class C | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | return of default constructor of class C | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | return of default constructor of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super(...args) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super(...args) | contextSurroundingFunctionParameters | (args) |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super(...args) | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super(...args) | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | super(...args) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | this | enclosingFunctionBody | args |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/DomBasedXss/react-use-context.js:13:27:13:26 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:14:7 | foo | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:14:7 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:14:7 | foo | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:5:17:5 | foo() { ... K\\n    } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:14:7 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:14:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:14:7 | this | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:14:7 | this | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:14:7 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | 'arguments' object of method foo of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | 'arguments' object of method foo of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | 'arguments' object of method foo of class C | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | 'arguments' object of method foo of class C | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | 'arguments' object of method foo of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | () {\\n   ... K\\n    } | assignedToPropName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | () {\\n   ... K\\n    } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | () {\\n   ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | () {\\n   ... K\\n    } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | exceptional return of method foo of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | exceptional return of method foo of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | exceptional return of method foo of class C | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | exceptional return of method foo of class C | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | exceptional return of method foo of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | return of method foo of class C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | return of method foo of class C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | return of method foo of class C | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | return of method foo of class C | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:14:8:17:5 | return of method foo of class C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:20 | { root } | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:20 | { root } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:20 | { root } | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:20 | { root } | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:20 | { root } | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | { root  ... context | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | { root  ... context | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | { root  ... context | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | { root  ... context | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:13:15:35 | { root  ... context | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:15:15:18 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:27 | this | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:27 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:27 | this | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:27 | this | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:27 | this | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:35 | this.context | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:35 | this.context | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:35 | this.context | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:35 | this.context | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:24:15:35 | this.context | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:29:15:35 | context | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:29:15:35 | context | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:29:15:35 | context | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:29:15:35 | context | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:15:29:15:35 | context | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:12 | root | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:12 | root | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:12 | root | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:12 | root | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:12 | root | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:24 | root.appendChild | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:24 | root.appendChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:24 | root.appendChild | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:24 | root.appendChild | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:24 | root.appendChild | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | exceptional return of root.ap ... w.name) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | exceptional return of root.ap ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | exceptional return of root.ap ... w.name) | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | exceptional return of root.ap ... w.name) | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | exceptional return of root.ap ... w.name) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | root.ap ... w.name) | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | root.ap ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | root.ap ... w.name) | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | root.ap ... w.name) | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:9:16:37 | root.ap ... w.name) | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:14:16:24 | appendChild | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:14:16:24 | appendChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:14:16:24 | appendChild | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:14:16:24 | appendChild | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:14:16:24 | appendChild | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:31 | window | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:31 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:31 | window | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:31 | window | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:31 | window | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | CalleeFlexibleAccessPath | root.appendChild |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:26:16:36 | window.name | receiverName | root |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:33:16:36 | name | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:33:16:36 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:33:16:36 | name | enclosingFunctionBody | root context root appendChild window name |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:33:16:36 | name | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/react-use-context.js:16:33:16:36 | name | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:1 | C | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:1 | C | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:1 | C | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:13 | C.contextType | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:13 | C.contextType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:13 | C.contextType | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:25 | C.conte ... Context | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:25 | C.conte ... Context | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:1:20:25 | C.conte ... Context | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:3:20:13 | contextType | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:3:20:13 | contextType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:3:20:13 | contextType | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:17:20:25 | MyContext | assignedToPropName | contextType |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:17:20:25 | MyContext | contextFunctionInterfaces | constructor(args)\nfoo()\nuseDoc1()\nuseMyContext() |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:17:20:25 | MyContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-context.js:20:17:20:25 | MyContext | fileImports | ./react-create-context react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:1 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:1 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:1 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:33 | import  ... react'; | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:33 | import  ... react'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:1:1:33 | import  ... react'; | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:10:1:17 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:26:1:32 | 'react' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:26:1:32 | 'react' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:1:26:1:32 | 'react' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | this | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | this | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | useState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | useState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:3:0 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | 'arguments' object of function initialState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | 'arguments' object of function initialState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | 'arguments' object of function initialState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | 'arguments' object of function initialState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | 'arguments' object of function initialState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | exceptional return of function initialState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | exceptional return of function initialState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | exceptional return of function initialState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | exceptional return of function initialState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | exceptional return of function initialState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | functio ... OT OK\\n} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | functio ... OT OK\\n} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | return of function initialState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | return of function initialState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | return of function initialState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | return of function initialState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:1:6:1 | return of function initialState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:10:3:21 | initialState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:10:3:21 | initialState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:3:10:3:21 | initialState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:25 | [state, setState] | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:25 | [state, setState] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:25 | [state, setState] | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:25 | [state, setState] | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:25 | [state, setState] | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | [state, ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | [state, ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | [state, ... w.name) | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | [state, ... w.name) | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | [state, ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:9:4:49 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:10:4:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:17:4:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:36 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:36 | useState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:36 | useState | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:36 | useState | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:36 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | exceptional return of useStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | exceptional return of useStat ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | exceptional return of useStat ... w.name) | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | exceptional return of useStat ... w.name) | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | exceptional return of useStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | useStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | useStat ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | useStat ... w.name) | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | useStat ... w.name) | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:29:4:49 | useStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:43 | window | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:43 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:43 | window | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:43 | window | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:43 | window | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | CalleeFlexibleAccessPath | useState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:38:4:48 | window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:45:4:48 | name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:45:4:48 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:45:4:48 | name | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:45:4:48 | name | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:4:45:4:48 | name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:12:5:64 | <div da ... ></div> | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:12:5:64 | <div da ... ></div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:12:5:64 | <div da ... ></div> | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:12:5:64 | <div da ... ></div> | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:12:5:64 | <div da ... ></div> | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:13:5:15 | div | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:13:5:15 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:13:5:15 | div | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:13:5:15 | div | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:13:5:15 | div | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:39 | dangero ... nerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:39 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:39 | dangero ... nerHTML | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:39 | dangero ... nerHTML | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:39 | dangero ... nerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:17:5:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:42:5:56 | {__html: state} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:48 | __html | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:48 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:48 | __html | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:48 | __html | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:48 | __html | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:43:5:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | enclosingFunctionBody | state setState useState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | enclosingFunctionName | initialState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:5:51:5:55 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | this | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | this | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | useState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | useState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:8:0 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | 'arguments' object of function setStateValue | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | 'arguments' object of function setStateValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | 'arguments' object of function setStateValue | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | 'arguments' object of function setStateValue | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | 'arguments' object of function setStateValue | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | exceptional return of function setStateValue | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | exceptional return of function setStateValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | exceptional return of function setStateValue | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | exceptional return of function setStateValue | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | exceptional return of function setStateValue | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | functio ... OT OK\\n} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | functio ... OT OK\\n} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | return of function setStateValue | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | return of function setStateValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | return of function setStateValue | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | return of function setStateValue | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:1:12:1 | return of function setStateValue | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:10:8:22 | setStateValue | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:10:8:22 | setStateValue | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:8:10:8:22 | setStateValue | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:25 | [state, setState] | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:25 | [state, setState] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:25 | [state, setState] | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:25 | [state, setState] | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:25 | [state, setState] | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | [state, ... ('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | [state, ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | [state, ... ('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | [state, ... ('foo') | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | [state, ... ('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | setState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:9:9:43 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:10:9:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:17:9:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:36 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:36 | useState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:36 | useState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:36 | useState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:36 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | exceptional return of useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | exceptional return of useState('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | exceptional return of useState('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | exceptional return of useState('foo') | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | exceptional return of useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | useState('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | useState('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | useState('foo') | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:29:9:43 | useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | CalleeFlexibleAccessPath | useState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:9:38:9:42 | 'foo' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:12 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:12 | setState | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | exceptional return of setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | exceptional return of setStat ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | exceptional return of setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | exceptional return of setStat ... w.name) | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | exceptional return of setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | setStat ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | setStat ... w.name) | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:5:10:25 | setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:19 | window | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:19 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:19 | window | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:19 | window | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:19 | window | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:14:10:24 | window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:21:10:24 | name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:21:10:24 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:21:10:24 | name | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:21:10:24 | name | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:10:21:10:24 | name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:12:11:64 | <div da ... ></div> | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:12:11:64 | <div da ... ></div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:12:11:64 | <div da ... ></div> | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:12:11:64 | <div da ... ></div> | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:12:11:64 | <div da ... ></div> | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:13:11:15 | div | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:13:11:15 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:13:11:15 | div | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:13:11:15 | div | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:13:11:15 | div | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:39 | dangero ... nerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:39 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:39 | dangero ... nerHTML | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:39 | dangero ... nerHTML | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:39 | dangero ... nerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:17:11:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:42:11:56 | {__html: state} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:48 | __html | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:48 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:48 | __html | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:48 | __html | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:48 | __html | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:43:11:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | enclosingFunctionName | setStateValue |
| autogenerated/Xss/DomBasedXss/react-use-state.js:11:51:11:55 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | this | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | this | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | useState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | useState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:14:0 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | 'arguments' object of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | 'arguments' object of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | 'arguments' object of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | 'arguments' object of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | 'arguments' object of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | exceptional return of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | exceptional return of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | exceptional return of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | exceptional return of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | exceptional return of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | functio ... OT OK\\n} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | functio ... OT OK\\n} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | return of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | return of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | return of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | return of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:1:18:1 | return of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:10:14:26 | setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:10:14:26 | setStateValueLazy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:14:10:14:26 | setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:25 | [state, setState] | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:25 | [state, setState] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:25 | [state, setState] | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:25 | [state, setState] | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:25 | [state, setState] | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | [state, ... ('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | [state, ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | [state, ... ('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | [state, ... ('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | [state, ... ('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:9:15:43 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:10:15:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:17:15:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:36 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:36 | useState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:36 | useState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:36 | useState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:36 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | exceptional return of useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | exceptional return of useState('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | exceptional return of useState('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | exceptional return of useState('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | exceptional return of useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | useState('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | useState('foo') | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | useState('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:29:15:43 | useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | CalleeFlexibleAccessPath | useState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:15:38:15:42 | 'foo' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:12 | setState | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:12 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | exceptional return of setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | exceptional return of setStat ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | exceptional return of setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | exceptional return of setStat ... w.name) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | exceptional return of setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | setStat ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | setStat ... w.name) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:5:16:31 | setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | 'arguments' object of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | 'arguments' object of anonymous function | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | 'arguments' object of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | 'arguments' object of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | () => window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | exceptional return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | exceptional return of anonymous function | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | exceptional return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | exceptional return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | return of anonymous function | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:14:16:30 | return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:25 | window | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:25 | window | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:25 | window | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:25 | window | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:25 | window | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:30 | window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:30 | window.name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:30 | window.name | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:30 | window.name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:20:16:30 | window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:27:16:30 | name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:27:16:30 | name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:27:16:30 | name | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:27:16:30 | name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:16:27:16:30 | name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:12:17:64 | <div da ... ></div> | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:12:17:64 | <div da ... ></div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:12:17:64 | <div da ... ></div> | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:12:17:64 | <div da ... ></div> | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:12:17:64 | <div da ... ></div> | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:13:17:15 | div | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:13:17:15 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:13:17:15 | div | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:13:17:15 | div | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:13:17:15 | div | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:39 | dangero ... nerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:39 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:39 | dangero ... nerHTML | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:39 | dangero ... nerHTML | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:39 | dangero ... nerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:17:17:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:42:17:56 | {__html: state} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:48 | __html | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:48 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:48 | __html | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:48 | __html | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:48 | __html | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:43:17:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | enclosingFunctionBody | state setState useState foo setState window name div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:17:51:17:55 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | this | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | this | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | useState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | useState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:20:0 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | 'arguments' object of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | 'arguments' object of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | 'arguments' object of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | 'arguments' object of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | 'arguments' object of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | exceptional return of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | exceptional return of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | exceptional return of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | exceptional return of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | exceptional return of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | functio ... ame);\\n} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | functio ... ame);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | functio ... ame);\\n} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | return of function setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | return of function setStateValueLazy | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | return of function setStateValueLazy | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | return of function setStateValueLazy | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:1:26:1 | return of function setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:10:20:26 | setStateValueLazy | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:10:20:26 | setStateValueLazy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:20:10:20:26 | setStateValueLazy | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:25 | [state, setState] | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:25 | [state, setState] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:25 | [state, setState] | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:25 | [state, setState] | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:25 | [state, setState] | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | [state, ... ('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | [state, ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | [state, ... ('foo') | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | [state, ... ('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | [state, ... ('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | setState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:9:21:43 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:10:21:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:17:21:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:36 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:36 | useState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:36 | useState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:36 | useState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:36 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | exceptional return of useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | exceptional return of useState('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | exceptional return of useState('foo') | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | exceptional return of useState('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | exceptional return of useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | useState('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | useState('foo') | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | useState('foo') | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:29:21:43 | useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | CalleeFlexibleAccessPath | useState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:21:38:21:42 | 'foo' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:22:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:22:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:22:12 | setState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:22:12 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:22:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | exceptional return of setStat ... \\n    }) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | exceptional return of setStat ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | exceptional return of setStat ... \\n    }) | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | exceptional return of setStat ... \\n    }) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | exceptional return of setStat ... \\n    }) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | setStat ... \\n    }) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | setStat ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | setStat ... \\n    }) | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | setStat ... \\n    }) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:5:24:6 | setStat ... \\n    }) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:22:17 | prev | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | 'arguments' object of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | 'arguments' object of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | 'arguments' object of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | exceptional return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | exceptional return of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | exceptional return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | exceptional return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | prev => ... K\\n    } | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | return of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:22:14:24:5 | return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:16 | document | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:16 | document | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:16 | document | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:16 | document | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:16 | document | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:21 | document.body | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:21 | document.body | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:21 | document.body | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:21 | document.body | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:21 | document.body | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:31 | documen ... nerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:31 | documen ... nerHTML | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:31 | documen ... nerHTML | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:31 | documen ... nerHTML | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:31 | documen ... nerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:38 | documen ...  = prev | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:38 | documen ...  = prev | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:38 | documen ...  = prev | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:38 | documen ...  = prev | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:9:23:38 | documen ...  = prev | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:18:23:21 | body | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:18:23:21 | body | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:18:23:21 | body | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:18:23:21 | body | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:18:23:21 | body | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:23:23:31 | innerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:23:23:31 | innerHTML | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:23:23:31 | innerHTML | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:23:23:31 | innerHTML | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:23:23:31 | innerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | contextSurroundingFunctionParameters | ()\n(prev) |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:23:35:23:38 | prev | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:12 | setState | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:12 | setState | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | exceptional return of setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | exceptional return of setStat ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | exceptional return of setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | exceptional return of setStat ... w.name) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | exceptional return of setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | setStat ... w.name) | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | setStat ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | setStat ... w.name) | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | setStat ... w.name) | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:5:25:31 | setStat ... w.name) | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | 'arguments' object of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | 'arguments' object of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | 'arguments' object of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | 'arguments' object of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | () => window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | exceptional return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | exceptional return of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | exceptional return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | exceptional return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | return of anonymous function | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | return of anonymous function | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:14:25:30 | return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:25 | window | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:25 | window | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:25 | window | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:25 | window | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:25 | window | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:30 | window.name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:30 | window.name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:30 | window.name | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:30 | window.name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:20:25:30 | window.name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:27:25:30 | name | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:27:25:30 | name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:27:25:30 | name | enclosingFunctionBody | state setState useState foo setState prev document body innerHTML prev setState window name |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:27:25:30 | name | enclosingFunctionName | setStateValueLazy |
| autogenerated/Xss/DomBasedXss/react-use-state.js:25:27:25:30 | name | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | this | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | this | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | this | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | this | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | useState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | useState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | useState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:28:0 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | 'arguments' object of function setStateValueSafe | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | 'arguments' object of function setStateValueSafe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | 'arguments' object of function setStateValueSafe | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | 'arguments' object of function setStateValueSafe | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | 'arguments' object of function setStateValueSafe | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | exceptional return of function setStateValueSafe | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | exceptional return of function setStateValueSafe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | exceptional return of function setStateValueSafe | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | exceptional return of function setStateValueSafe | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | exceptional return of function setStateValueSafe | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | functio ... // OK\\n} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | functio ... // OK\\n} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | return of function setStateValueSafe | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | return of function setStateValueSafe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | return of function setStateValueSafe | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | return of function setStateValueSafe | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:1:33:1 | return of function setStateValueSafe | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:10:28:26 | setStateValueSafe | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:10:28:26 | setStateValueSafe | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:28:10:28:26 | setStateValueSafe | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:25 | [state, setState] | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:25 | [state, setState] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:25 | [state, setState] | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:25 | [state, setState] | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:25 | [state, setState] | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | [state, ... ('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | [state, ... ('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | [state, ... ('foo') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | [state, ... ('foo') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | [state, ... ('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | setState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | setState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:9:29:43 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:10:29:14 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:17:29:24 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:36 | useState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:36 | useState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:36 | useState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:36 | useState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:36 | useState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | exceptional return of useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | exceptional return of useState('foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | exceptional return of useState('foo') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | exceptional return of useState('foo') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | exceptional return of useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | useState('foo') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | useState('foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | useState('foo') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | useState('foo') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:29:29:43 | useState('foo') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | CalleeFlexibleAccessPath | useState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:29:38:29:42 | 'foo' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:12 | setState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:12 | setState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | exceptional return of setState('safe') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | exceptional return of setState('safe') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | exceptional return of setState('safe') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | exceptional return of setState('safe') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | exceptional return of setState('safe') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | setState('safe') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | setState('safe') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | setState('safe') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | setState('safe') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:5:30:20 | setState('safe') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:30:14:30:19 | 'safe' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:12 | setState | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:12 | setState | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:12 | setState | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:12 | setState | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:12 | setState | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | exceptional return of setStat ...  safe') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | exceptional return of setStat ...  safe') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | exceptional return of setStat ...  safe') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | exceptional return of setStat ...  safe') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | exceptional return of setStat ...  safe') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | setStat ...  safe') | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | setStat ...  safe') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | setStat ...  safe') | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | setStat ...  safe') | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:5:31:31 | setStat ...  safe') | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | 'arguments' object of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | 'arguments' object of anonymous function | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | 'arguments' object of anonymous function | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | 'arguments' object of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | CalleeFlexibleAccessPath | setState |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | calleeImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | () => 'also safe' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | exceptional return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | exceptional return of anonymous function | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | exceptional return of anonymous function | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | exceptional return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | return of anonymous function | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | return of anonymous function | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | return of anonymous function | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:14:31:30 | return of anonymous function | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:20:31:30 | 'also safe' | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:20:31:30 | 'also safe' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:20:31:30 | 'also safe' | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:20:31:30 | 'also safe' | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:31:20:31:30 | 'also safe' | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:12:32:64 | <div da ... ></div> | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:12:32:64 | <div da ... ></div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:12:32:64 | <div da ... ></div> | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:12:32:64 | <div da ... ></div> | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:12:32:64 | <div da ... ></div> | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:13:32:15 | div | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:13:32:15 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:13:32:15 | div | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:13:32:15 | div | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:13:32:15 | div | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:39 | dangero ... nerHTML | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:39 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:39 | dangero ... nerHTML | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:39 | dangero ... nerHTML | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:39 | dangero ... nerHTML | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:17:32:57 | dangero ... state}} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:42:32:56 | {__html: state} | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:48 | __html | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:48 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:48 | __html | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:48 | __html | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:48 | __html | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:43:32:55 | __html: state | fileImports | react |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | contextFunctionInterfaces | initialState()\nsetStateValue()\nsetStateValueLazy()\nsetStateValueLazy()\nsetStateValueSafe() |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | enclosingFunctionBody | state setState useState foo setState safe setState also safe div dangerouslySetInnerHTML __html state |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | enclosingFunctionName | setStateValueSafe |
| autogenerated/Xss/DomBasedXss/react-use-state.js:32:51:32:55 | state | fileImports | react |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | 'arguments' object of function escapeHtml | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | 'arguments' object of function escapeHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | 'arguments' object of function escapeHtml | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | 'arguments' object of function escapeHtml | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | 'arguments' object of function escapeHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | exceptional return of function escapeHtml | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | exceptional return of function escapeHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | exceptional return of function escapeHtml | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | exceptional return of function escapeHtml | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | exceptional return of function escapeHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | functio ... t;');\\n} | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | functio ... t;');\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | functio ... t;');\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | return of function escapeHtml | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | return of function escapeHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | return of function escapeHtml | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | return of function escapeHtml | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:1:7:1 | return of function escapeHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:10:1:19 | escapeHtml | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:10:1:19 | escapeHtml | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:10:1:19 | escapeHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:1:21:1:21 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:11 | amp | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:11 | amp | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:11 | amp | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:11 | amp | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:11 | amp | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp = /&/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp = /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp = /&/g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp = /&/g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:9:2:18 | amp = /&/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:15:2:18 | /&/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:15:2:18 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:15:2:18 | /&/g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:15:2:18 | /&/g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:15:2:18 | /&/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:22 | lt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:22 | lt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:22 | lt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:22 | lt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:22 | lt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt = /</g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt = /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt = /</g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt = /</g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:21:2:29 | lt = /</g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:26:2:29 | /</g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:26:2:29 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:26:2:29 | /</g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:26:2:29 | /</g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:26:2:29 | /</g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:33 | gt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:33 | gt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:33 | gt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:33 | gt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:33 | gt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt = />/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt = />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt = />/g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt = />/g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:32:2:40 | gt = />/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:37:2:40 | />/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:37:2:40 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:37:2:40 | />/g | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:37:2:40 | />/g | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:2:37:2:40 | />/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:12 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:12 | s | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:12 | s | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:12 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:21 | s.toString | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:21 | s.toString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:21 | s.toString | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:21 | s.toString | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:21 | s.toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | exceptional return of s.toString() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | exceptional return of s.toString() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | exceptional return of s.toString() | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | exceptional return of s.toString() | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | exceptional return of s.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | s.toString() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | s.toString() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | s.toString() | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | s.toString() | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:3:23 | s.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:16 | s.toStr ... replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:16 | s.toStr ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:16 | s.toStr ... replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:16 | s.toStr ... replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:16 | s.toStr ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | exceptional return of s.toStr ... &amp;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | exceptional return of s.toStr ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | exceptional return of s.toStr ... &amp;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | exceptional return of s.toStr ... &amp;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | exceptional return of s.toStr ... &amp;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | s.toStr ... &amp;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | s.toStr ... &amp;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | s.toStr ... &amp;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | s.toStr ... &amp;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:4:30 | s.toStr ... &amp;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:16 | s.toStr ... replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:16 | s.toStr ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:16 | s.toStr ... replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:16 | s.toStr ... replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:16 | s.toStr ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | exceptional return of s.toStr ... '&lt;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | exceptional return of s.toStr ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | exceptional return of s.toStr ... '&lt;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | exceptional return of s.toStr ... '&lt;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | exceptional return of s.toStr ... '&lt;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | s.toStr ... '&lt;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | s.toStr ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | s.toStr ... '&lt;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | s.toStr ... '&lt;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:5:28 | s.toStr ... '&lt;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:16 | s.toStr ... replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:16 | s.toStr ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:16 | s.toStr ... replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:16 | s.toStr ... replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:16 | s.toStr ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | exceptional return of s.toStr ... '&gt;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | exceptional return of s.toStr ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | exceptional return of s.toStr ... '&gt;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | exceptional return of s.toStr ... '&gt;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | exceptional return of s.toStr ... '&gt;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | s.toStr ... '&gt;') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | s.toStr ... '&gt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | s.toStr ... '&gt;') | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | s.toStr ... '&gt;') | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:12:6:28 | s.toStr ... '&gt;') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:14:3:21 | toString | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:14:3:21 | toString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:14:3:21 | toString | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:14:3:21 | toString | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:3:14:3:21 | toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:10:4:16 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:10:4:16 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:10:4:16 | replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:10:4:16 | replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:10:4:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | CalleeFlexibleAccessPath | s.toString().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:18:4:20 | amp | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | CalleeFlexibleAccessPath | s.toString().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:4:23:4:29 | '&amp;' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:10:5:16 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:10:5:16 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:10:5:16 | replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:10:5:16 | replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:10:5:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | CalleeFlexibleAccessPath | s.toString().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:18:5:19 | lt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | CalleeFlexibleAccessPath | s.toString().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:5:22:5:27 | '&lt;' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:10:6:16 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:10:6:16 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:10:6:16 | replace | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:10:6:16 | replace | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:10:6:16 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | CalleeFlexibleAccessPath | s.toString().replace().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:18:6:19 | gt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | CalleeFlexibleAccessPath | s.toString().replace().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | enclosingFunctionBody | s amp /&/g lt /</g gt />/g s toString replace amp &amp; replace lt &lt; replace gt &gt; |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | enclosingFunctionName | escapeHtml |
| autogenerated/Xss/DomBasedXss/sanitiser.js:6:22:6:27 | '&gt;' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:9:0 | this | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:9:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:9:0 | this | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:9:0 | this | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:9:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | 'arguments' object of function escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | 'arguments' object of function escapeAttr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | 'arguments' object of function escapeAttr | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | 'arguments' object of function escapeAttr | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | 'arguments' object of function escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | exceptional return of function escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | exceptional return of function escapeAttr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | exceptional return of function escapeAttr | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | exceptional return of function escapeAttr | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | exceptional return of function escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | functio ... 27');\\n} | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | functio ... 27');\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | functio ... 27');\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | return of function escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | return of function escapeAttr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | return of function escapeAttr | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | return of function escapeAttr | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:1:13:1 | return of function escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:10:9:19 | escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:10:9:19 | escapeAttr | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:10:9:19 | escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:9:21:9:21 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:12 | s | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:12 | s | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:12 | s | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:12 | s | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:21 | s.toString | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:21 | s.toString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:21 | s.toString | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:21 | s.toString | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:21 | s.toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | exceptional return of s.toString() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | exceptional return of s.toString() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | exceptional return of s.toString() | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | exceptional return of s.toString() | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | exceptional return of s.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | s.toString() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | s.toString() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | s.toString() | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | s.toString() | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:10:23 | s.toString() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:17 | s.toStr ... replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:17 | s.toStr ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:17 | s.toStr ... replace | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:17 | s.toStr ... replace | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:17 | s.toStr ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | exceptional return of s.toStr ...  '%22') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | exceptional return of s.toStr ...  '%22') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | exceptional return of s.toStr ...  '%22') | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | exceptional return of s.toStr ...  '%22') | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | exceptional return of s.toStr ...  '%22') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | s.toStr ...  '%22') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | s.toStr ...  '%22') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | s.toStr ...  '%22') | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | s.toStr ...  '%22') | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:11:30 | s.toStr ...  '%22') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:17 | s.toStr ... replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:17 | s.toStr ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:17 | s.toStr ... replace | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:17 | s.toStr ... replace | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:17 | s.toStr ... replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | exceptional return of s.toStr ...  '%27') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | exceptional return of s.toStr ...  '%27') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | exceptional return of s.toStr ...  '%27') | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | exceptional return of s.toStr ...  '%27') | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | exceptional return of s.toStr ...  '%27') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | s.toStr ...  '%27') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | s.toStr ...  '%27') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | s.toStr ...  '%27') | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | s.toStr ...  '%27') | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:12:12:30 | s.toStr ...  '%27') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:14:10:21 | toString | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:14:10:21 | toString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:14:10:21 | toString | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:14:10:21 | toString | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:10:14:10:21 | toString | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:11:11:17 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:11:11:17 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:11:11:17 | replace | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:11:11:17 | replace | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:11:11:17 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | CalleeFlexibleAccessPath | s.toString().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:19:11:22 | /'/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | CalleeFlexibleAccessPath | s.toString().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:11:25:11:29 | '%22' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:11:12:17 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:11:12:17 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:11:12:17 | replace | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:11:12:17 | replace | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:11:12:17 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | CalleeFlexibleAccessPath | s.toString().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:19:12:22 | /"/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | CalleeFlexibleAccessPath | s.toString().replace().replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | enclosingFunctionBody | s s toString replace /'/g %22 replace /"/g %27 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | enclosingFunctionName | escapeAttr |
| autogenerated/Xss/DomBasedXss/sanitiser.js:12:25:12:29 | '%27' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:15:0 | this | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:15:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:15:0 | this | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:15:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:15:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | 'arguments' object of function test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | 'arguments' object of function test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | exceptional return of function test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | exceptional return of function test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | functio ... OT OK\\n} | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | return of function test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | return of function test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:1:49:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:10:15:13 | test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:10:15:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:15:10:15:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:13 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:13 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:13 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:13 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:13 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted ... ow.name | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted ... ow.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted ... ow.name | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted ... ow.name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:7:16:27 | tainted ... ow.name | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:22 | window | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:22 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:22 | window | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:22 | window | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:22 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:27 | window.name | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:27 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:27 | window.name | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:27 | window.name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:17:16:27 | window.name | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:24:16:27 | name | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:24:16:27 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:24:16:27 | name | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:24:16:27 | name | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:16:24:16:27 | name | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:9 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:9 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:9 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:9 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:9 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt = d ... ement() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt = d ... ement() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt = d ... ement() | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt = d ... ement() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:7:17:36 | elt = d ... ement() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:20 | document | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:20 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:20 | document | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:20 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:20 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:34 | documen ... Element | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:34 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:34 | documen ... Element | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:34 | documen ... Element | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:34 | documen ... Element | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | documen ... ement() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | documen ... ement() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | documen ... ement() | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | documen ... ement() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | documen ... ement() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | exceptional return of documen ... ement() | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | exceptional return of documen ... ement() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | exceptional return of documen ... ement() | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | exceptional return of documen ... ement() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:13:17:36 | exceptional return of documen ... ement() | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:22:17:34 | createElement | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:22:17:34 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:22:17:34 | createElement | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:22:17:34 | createElement | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:17:22:17:34 | createElement | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:5 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:5 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:5 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:5 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:5 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:15 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:15 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:15 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:15 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:15 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:91 | elt.inn ...  "</a>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:91 | elt.inn ...  "</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:91 | elt.inn ...  "</a>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:91 | elt.inn ...  "</a>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:3:18:91 | elt.inn ...  "</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:7:18:15 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:7:18:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:7:18:15 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:7:18:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:7:18:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:30 | "<a href=\\"" | stringConcatenatedWith |  -endpoint- escapeAttr() + '">' + escapeHtml() + '</a>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:52 | "<a hre ... ainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:52 | "<a hre ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:52 | "<a hre ... ainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:52 | "<a hre ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:52 | "<a hre ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:60 | "<a hre ... + "\\">" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:60 | "<a hre ... + "\\">" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:60 | "<a hre ... + "\\">" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:60 | "<a hre ... + "\\">" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:60 | "<a hre ... + "\\">" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:82 | "<a hre ... ainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:82 | "<a hre ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:82 | "<a hre ... ainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:82 | "<a hre ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:82 | "<a hre ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:19:18:91 | "<a hre ...  "</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:43 | escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:43 | escapeAttr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:43 | escapeAttr | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:43 | escapeAttr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:43 | escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | escapeAttr(tainted) | stringConcatenatedWith | '<a href="' -endpoint- '">' + escapeHtml() + '</a>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | exceptional return of escapeAttr(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | exceptional return of escapeAttr(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | exceptional return of escapeAttr(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | exceptional return of escapeAttr(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:34:18:52 | exceptional return of escapeAttr(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:56:18:60 | "\\">" | stringConcatenatedWith | '<a href="' + escapeAttr() -endpoint- escapeHtml() + '</a>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:73 | escapeHtml | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:73 | escapeHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:73 | escapeHtml | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:73 | escapeHtml | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:73 | escapeHtml | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | escapeHtml(tainted) | stringConcatenatedWith | '<a href="' + escapeAttr() + '">' -endpoint- '</a>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | exceptional return of escapeHtml(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | exceptional return of escapeHtml(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | exceptional return of escapeHtml(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | exceptional return of escapeHtml(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:64:18:82 | exceptional return of escapeHtml(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:18:86:18:91 | "</a>" | stringConcatenatedWith | '<a href="' + escapeAttr() + '">' + escapeHtml() -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:5 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:5 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:5 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:5 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:5 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:15 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:15 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:15 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:15 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:15 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:58 | elt.inn ... </div>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:58 | elt.inn ... </div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:58 | elt.inn ... </div>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:58 | elt.inn ... </div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:3:19:58 | elt.inn ... </div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:7:19:15 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:7:19:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:7:19:15 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:7:19:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:7:19:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:25 | "<div>" | stringConcatenatedWith |  -endpoint- escapeAttr() + '</div>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:47 | "<div>" ... ainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:47 | "<div>" ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:47 | "<div>" ... ainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:47 | "<div>" ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:47 | "<div>" ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:19:19:58 | "<div>" ... </div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:38 | escapeAttr | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:38 | escapeAttr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:38 | escapeAttr | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:38 | escapeAttr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:38 | escapeAttr | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | escapeAttr(tainted) | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | exceptional return of escapeAttr(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | exceptional return of escapeAttr(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | exceptional return of escapeAttr(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | exceptional return of escapeAttr(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:29:19:47 | exceptional return of escapeAttr(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:19:51:19:58 | "</div>" | stringConcatenatedWith | '<div>' + escapeAttr() -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:13 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:13 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:13 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:13 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:13 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex = /[<>'"&]/ | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex = /[<>'"&]/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex = /[<>'"&]/ | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex = /[<>'"&]/ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:9:21:25 | regex = /[<>'"&]/ | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:17:21:25 | /[<>'"&]/ | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:17:21:25 | /[<>'"&]/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:17:21:25 | /[<>'"&]/ | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:17:21:25 | /[<>'"&]/ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:21:17:21:25 | /[<>'"&]/ | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:11 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:11 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:11 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:11 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:11 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:16 | regex.test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:16 | regex.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:16 | regex.test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:16 | regex.test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:16 | regex.test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | exceptional return of regex.test(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | exceptional return of regex.test(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | exceptional return of regex.test(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | exceptional return of regex.test(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | exceptional return of regex.test(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | regex.test(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | regex.test(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | regex.test(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | regex.test(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:7:22:25 | regex.test(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:13:22:16 | test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:13:22:16 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:13:22:16 | test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:13:22:16 | test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:13:22:16 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | CalleeFlexibleAccessPath | regex.test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:22:18:22:24 | tainted | receiverName | regex |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:5:23:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:9:23:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:9:23:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:9:23:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:9:23:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:9:23:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:21:23:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:29:23:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:23:39:23:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:5:25:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:9:25:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:9:25:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:9:25:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:9:25:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:9:25:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:21:25:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:29:25:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:25:39:25:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:7:27:26 | !regex.test(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:7:27:26 | !regex.test(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:7:27:26 | !regex.test(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:7:27:26 | !regex.test(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:7:27:26 | !regex.test(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:12 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:12 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:12 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:12 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:12 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:17 | regex.test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:17 | regex.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:17 | regex.test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:17 | regex.test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:17 | regex.test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | exceptional return of regex.test(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | exceptional return of regex.test(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | exceptional return of regex.test(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | exceptional return of regex.test(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | exceptional return of regex.test(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | regex.test(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | regex.test(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | regex.test(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | regex.test(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:8:27:26 | regex.test(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:14:27:17 | test | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:14:27:17 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:14:27:17 | test | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:14:27:17 | test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:14:27:17 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | CalleeFlexibleAccessPath | regex.test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:27:19:27:25 | tainted | receiverName | regex |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:5:28:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:9:28:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:9:28:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:9:28:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:9:28:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:9:28:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:21:28:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:29:28:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:28:39:28:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:5:30:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:9:30:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:9:30:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:9:30:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:9:30:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:9:30:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:21:30:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:29:30:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:30:39:30:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:11 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:11 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:11 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:11 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:11 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:16 | regex.exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:16 | regex.exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:16 | regex.exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:16 | regex.exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:16 | regex.exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | exceptional return of regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | exceptional return of regex.exec(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | exceptional return of regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | exceptional return of regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | exceptional return of regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | regex.exec(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:7:32:25 | regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:13:32:16 | exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:13:32:16 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:13:32:16 | exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:13:32:16 | exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:13:32:16 | exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | CalleeFlexibleAccessPath | regex.exec |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:32:18:32:24 | tainted | receiverName | regex |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:5:33:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:9:33:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:9:33:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:9:33:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:9:33:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:9:33:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:21:33:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:29:33:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:33:39:33:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:5:35:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:9:35:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:9:35:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:9:35:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:9:35:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:9:35:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:21:35:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:29:35:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:35:39:35:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:11 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:11 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:11 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:11 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:11 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:16 | regex.exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:16 | regex.exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:16 | regex.exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:16 | regex.exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:16 | regex.exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | exceptional return of regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | exceptional return of regex.exec(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | exceptional return of regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | exceptional return of regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | exceptional return of regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | regex.exec(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:25 | regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:33 | regex.e ... != null | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:33 | regex.e ... != null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:33 | regex.e ... != null | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:33 | regex.e ... != null | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:7:37:33 | regex.e ... != null | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:13:37:16 | exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:13:37:16 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:13:37:16 | exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:13:37:16 | exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:13:37:16 | exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | CalleeFlexibleAccessPath | regex.exec |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:18:37:24 | tainted | receiverName | regex |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:30:37:33 | null | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:30:37:33 | null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:30:37:33 | null | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:30:37:33 | null | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:37:30:37:33 | null | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:5:38:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:9:38:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:9:38:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:9:38:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:9:38:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:9:38:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:21:38:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:29:38:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:38:39:38:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:5:40:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:9:40:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:9:40:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:9:40:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:9:40:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:9:40:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:21:40:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:29:40:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:40:39:40:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:11 | regex | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:11 | regex | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:11 | regex | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:11 | regex | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:11 | regex | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:16 | regex.exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:16 | regex.exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:16 | regex.exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:16 | regex.exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:16 | regex.exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | exceptional return of regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | exceptional return of regex.exec(tainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | exceptional return of regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | exceptional return of regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | exceptional return of regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | regex.exec(tainted) | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | regex.exec(tainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | regex.exec(tainted) | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | regex.exec(tainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:25 | regex.exec(tainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:33 | regex.e ... == null | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:33 | regex.e ... == null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:33 | regex.e ... == null | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:33 | regex.e ... == null | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:7:42:33 | regex.e ... == null | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:13:42:16 | exec | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:13:42:16 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:13:42:16 | exec | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:13:42:16 | exec | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:13:42:16 | exec | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | CalleeFlexibleAccessPath | regex.exec |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:18:42:24 | tainted | receiverName | regex |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:30:42:33 | null | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:30:42:33 | null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:30:42:33 | null | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:30:42:33 | null | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:42:30:42:33 | null | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:5:43:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:9:43:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:9:43:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:9:43:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:9:43:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:9:43:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:21:43:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:29:43:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:43:39:43:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:7 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:7 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:7 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:7 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:7 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:17 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:17 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:17 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:17 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:17 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:44 | elt.inn ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:44 | elt.inn ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:44 | elt.inn ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:44 | elt.inn ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:5:45:44 | elt.inn ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:9:45:17 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:9:45:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:9:45:17 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:9:45:17 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:9:45:17 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:25 | '<b>' | stringConcatenatedWith |  -endpoint- tainted + '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:35 | '<b>' + tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:35 | '<b>' + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:35 | '<b>' + tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:35 | '<b>' + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:35 | '<b>' + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:21:45:44 | '<b>' + ...  '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:29:45:35 | tainted | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:45:39:45:44 | '</b>' | stringConcatenatedWith | '<b>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:5 | elt | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:5 | elt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:5 | elt | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:5 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:5 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:15 | elt.innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:15 | elt.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:15 | elt.innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:15 | elt.innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:15 | elt.innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:46 | elt.inn ... /g, '') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:46 | elt.inn ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:46 | elt.inn ... /g, '') | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:46 | elt.inn ... /g, '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:3:48:46 | elt.inn ... /g, '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:7:48:15 | innerHTML | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:7:48:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:7:48:15 | innerHTML | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:7:48:15 | innerHTML | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:7:48:15 | innerHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:25 | tainted | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:25 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:25 | tainted | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:33 | tainted.replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:33 | tainted.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:33 | tainted.replace | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:33 | tainted.replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:33 | tainted.replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | exceptional return of tainted ... /g, '') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | exceptional return of tainted ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | exceptional return of tainted ... /g, '') | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | exceptional return of tainted ... /g, '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | exceptional return of tainted ... /g, '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:19:48:46 | tainted ... /g, '') | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:27:48:33 | replace | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:27:48:33 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:27:48:33 | replace | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:27:48:33 | replace | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:27:48:33 | replace | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | CalleeFlexibleAccessPath | tainted.replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:35:48:41 | /<\\w+/g | receiverName | tainted |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | CalleeFlexibleAccessPath | tainted.replace |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | contextFunctionInterfaces | escapeAttr(s)\nescapeHtml(s)\ntest() |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | enclosingFunctionBody | tainted window name elt document createElement elt innerHTML <a href=" escapeAttr tainted "> escapeHtml tainted </a> elt innerHTML <div> escapeAttr tainted </div> regex /[<>'"&]/ regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex test tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> regex exec tainted null elt innerHTML <b> tainted </b> elt innerHTML <b> tainted </b> elt innerHTML tainted replace /<\\w+/g  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | fileImports |  |
| autogenerated/Xss/DomBasedXss/sanitiser.js:48:44:48:45 | '' | receiverName | tainted |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:30:2 | (functi ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:30:2 | (functi ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:1:30:2 | (functi ... / OK\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:1:1 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:1:1 | this | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:1:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | exceptional return of anonymous function | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | functio ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | functio ... // OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | return of anonymous function | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:1:2:30:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:18 | sessionStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:18 | sessionStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:18 | sessionStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:18 | sessionStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:18 | sessionStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:26 | session ... setItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:26 | session ... setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:26 | session ... setItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:26 | session ... setItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:26 | session ... setItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | exceptional return of session ... search) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | exceptional return of session ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | exceptional return of session ... search) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | exceptional return of session ... search) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | exceptional return of session ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | session ... search) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | session ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | session ... search) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | session ... search) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:5:2:63 | session ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:20:2:26 | setItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:20:2:26 | setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:20:2:26 | setItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:20:2:26 | setItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:20:2:26 | setItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | CalleeFlexibleAccessPath | sessionStorage.setItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:28:2:36 | 'session' | receiverName | sessionStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:46 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:46 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:46 | document | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:46 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:46 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:55 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:55 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:55 | document.location | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:55 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:55 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | CalleeFlexibleAccessPath | sessionStorage.setItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:39:2:62 | documen ... .search | receiverName | sessionStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:48:2:55 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:48:2:55 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:48:2:55 | location | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:48:2:55 | location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:48:2:55 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:57:2:62 | search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:57:2:62 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:57:2:62 | search | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:57:2:62 | search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:2:57:2:62 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:16 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:16 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:16 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:16 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:16 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:24 | localStorage.setItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:24 | localStorage.setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:24 | localStorage.setItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:24 | localStorage.setItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:24 | localStorage.setItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | exceptional return of localSt ... search) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | exceptional return of localSt ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | exceptional return of localSt ... search) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | exceptional return of localSt ... search) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | exceptional return of localSt ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | localSt ... search) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | localSt ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | localSt ... search) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | localSt ... search) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:5:3:59 | localSt ... search) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:18:3:24 | setItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:18:3:24 | setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:18:3:24 | setItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:18:3:24 | setItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:18:3:24 | setItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | CalleeFlexibleAccessPath | localStorage.setItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:26:3:32 | 'local' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:42 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:42 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:42 | document | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:42 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:42 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:51 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:51 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:51 | document.location | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:51 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:51 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | CalleeFlexibleAccessPath | localStorage.setItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:35:3:58 | documen ... .search | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:44:3:51 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:44:3:51 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:44:3:51 | location | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:44:3:51 | location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:44:3:51 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:53:3:58 | search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:53:3:58 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:53:3:58 | search | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:53:3:58 | search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:3:53:3:58 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | $('myId ... sion')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | $('myId ... sion')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | $('myId ... sion')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | $('myId ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | $('myId ... sion')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | exceptional return of $('myId ... sion')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | exceptional return of $('myId ... sion')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | exceptional return of $('myId ... sion')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | exceptional return of $('myId ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:5:5:53 | exceptional return of $('myId ... sion')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:7:5:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:15:5:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:15:5:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:15:5:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:15:5:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:15:5:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:33 | sessionStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:33 | sessionStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:33 | sessionStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:33 | sessionStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:33 | sessionStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:41 | session ... getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:41 | session ... getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:41 | session ... getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:41 | session ... getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:41 | session ... getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | exceptional return of session ... ssion') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | exceptional return of session ... ssion') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | exceptional return of session ... ssion') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | exceptional return of session ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | exceptional return of session ... ssion') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:20:5:52 | session ... ssion') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:35:5:41 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:35:5:41 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:35:5:41 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:35:5:41 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:35:5:41 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | CalleeFlexibleAccessPath | sessionStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:5:43:5:51 | 'session' | receiverName | sessionStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | $('myId ... sion')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | $('myId ... sion')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | $('myId ... sion')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | $('myId ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | $('myId ... sion')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | exceptional return of $('myId ... sion')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | exceptional return of $('myId ... sion')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | exceptional return of $('myId ... sion')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | exceptional return of $('myId ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:5:6:51 | exceptional return of $('myId ... sion')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:7:6:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:15:6:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:15:6:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:15:6:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:15:6:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:15:6:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:31 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:31 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:31 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:31 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:31 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:39 | localStorage.getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:39 | localStorage.getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:39 | localStorage.getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:39 | localStorage.getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:39 | localStorage.getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | exceptional return of localSt ... ssion') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | exceptional return of localSt ... ssion') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | exceptional return of localSt ... ssion') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | exceptional return of localSt ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | exceptional return of localSt ... ssion') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:20:6:50 | localSt ... ssion') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:33:6:39 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:33:6:39 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:33:6:39 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:33:6:39 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:33:6:39 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | CalleeFlexibleAccessPath | localStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:6:41:6:49 | 'session' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | $('myId ... ocal')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | $('myId ... ocal')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | $('myId ... ocal')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | $('myId ... ocal')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | $('myId ... ocal')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | exceptional return of $('myId ... ocal')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | exceptional return of $('myId ... ocal')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | exceptional return of $('myId ... ocal')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | exceptional return of $('myId ... ocal')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:5:7:51 | exceptional return of $('myId ... ocal')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:7:7:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:15:7:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:15:7:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:15:7:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:15:7:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:15:7:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:33 | sessionStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:33 | sessionStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:33 | sessionStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:33 | sessionStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:33 | sessionStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:41 | session ... getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:41 | session ... getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:41 | session ... getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:41 | session ... getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:41 | session ... getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | exceptional return of session ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | exceptional return of session ... local') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | exceptional return of session ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | exceptional return of session ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | exceptional return of session ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:20:7:50 | session ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:35:7:41 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:35:7:41 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:35:7:41 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:35:7:41 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:35:7:41 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | CalleeFlexibleAccessPath | sessionStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:7:43:7:49 | 'local' | receiverName | sessionStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | $('myId ... ocal')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | $('myId ... ocal')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | $('myId ... ocal')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | $('myId ... ocal')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | $('myId ... ocal')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | exceptional return of $('myId ... ocal')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | exceptional return of $('myId ... ocal')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | exceptional return of $('myId ... ocal')) | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | exceptional return of $('myId ... ocal')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:5:8:49 | exceptional return of $('myId ... ocal')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:7:8:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:15:8:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:15:8:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:15:8:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:15:8:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:15:8:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:31 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:31 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:31 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:31 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:31 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:39 | localStorage.getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:39 | localStorage.getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:39 | localStorage.getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:39 | localStorage.getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:39 | localStorage.getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | exceptional return of localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | exceptional return of localSt ... local') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | exceptional return of localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | exceptional return of localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | exceptional return of localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:20:8:48 | localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:33:8:39 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:33:8:39 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:33:8:39 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:33:8:39 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:33:8:39 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | CalleeFlexibleAccessPath | localStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:8:41:8:47 | 'local' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:12 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:12 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:12 | href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:12 | href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:12 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href =  ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href =  ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href =  ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href =  ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:9:10:44 | href =  ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:27 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:27 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:27 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:27 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:27 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:35 | localStorage.getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:35 | localStorage.getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:35 | localStorage.getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:35 | localStorage.getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:35 | localStorage.getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | exceptional return of localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | exceptional return of localSt ... local') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | exceptional return of localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | exceptional return of localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | exceptional return of localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | localSt ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:16:10:44 | localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:29:10:35 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:29:10:35 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:29:10:35 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:29:10:35 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:29:10:35 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | CalleeFlexibleAccessPath | localStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:10:37:10:43 | 'local' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | $('myId ... r</a>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | $('myId ... r</a>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | $('myId ... r</a>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | $('myId ... r</a>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | $('myId ... r</a>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | exceptional return of $('myId ... r</a>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | exceptional return of $('myId ... r</a>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | exceptional return of $('myId ... r</a>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | exceptional return of $('myId ... r</a>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:5:12:55 | exceptional return of $('myId ... r</a>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:7:12:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:15:12:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:15:12:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:15:12:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:15:12:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:15:12:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:31 | "<a href=\\"" | stringConcatenatedWith |  -endpoint- href + '>foobar</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:38 | "<a href=\\"" + href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:38 | "<a href=\\"" + href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:38 | "<a href=\\"" + href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:38 | "<a href=\\"" + href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:38 | "<a href=\\"" + href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:20:12:54 | "<a hre ... ar</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:35:12:38 | href | stringConcatenatedWith | '<a href="' -endpoint- '>foobar</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:12:42:12:54 | ">foobar</a>" | stringConcatenatedWith | '<a href="' + href -endpoint-  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:12 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:12 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:12 | href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:12 | href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:12 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | exceptional return of href.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | exceptional return of href.indexOf("\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | exceptional return of href.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | exceptional return of href.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | exceptional return of href.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | href.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | href.indexOf("\\"") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | href.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | href.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:26 | href.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:33 | href.in ...  !== -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:33 | href.in ...  !== -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:33 | href.in ...  !== -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:33 | href.in ...  !== -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:9:14:33 | href.in ...  !== -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:14:14:20 | indexOf | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:14:14:20 | indexOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:14:14:20 | indexOf | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:14:14:20 | indexOf | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:14:14:20 | indexOf | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | CalleeFlexibleAccessPath | href.indexOf |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:22:14:25 | "\\"" | receiverName | href |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:32:14:33 | -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:32:14:33 | -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:32:14:33 | -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:32:14:33 | -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:32:14:33 | -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:33:14:33 | 1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:33:14:33 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:33:14:33 | 1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:33:14:33 | 1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:14:33:14:33 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | $('myId ... + "/>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | $('myId ... + "/>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | $('myId ... + "/>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | $('myId ... + "/>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | $('myId ... + "/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | exceptional return of $('myId ... + "/>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | exceptional return of $('myId ... + "/>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | exceptional return of $('myId ... + "/>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | exceptional return of $('myId ... + "/>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:5:17:46 | exceptional return of $('myId ... + "/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:7:17:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:15:17:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:15:17:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:15:17:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:15:17:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:15:17:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:31 | "<a href=\\"" | stringConcatenatedWith |  -endpoint- href + '/>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:38 | "<a href=\\"" + href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:38 | "<a href=\\"" + href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:38 | "<a href=\\"" + href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:38 | "<a href=\\"" + href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:38 | "<a href=\\"" + href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:20:17:45 | "<a hre ...  + "/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:35:17:38 | href | stringConcatenatedWith | '<a href="' -endpoint- '/>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:17:42:17:45 | "/>" | stringConcatenatedWith | '<a href="' + href -endpoint-  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:13 | href2 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:13 | href2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:13 | href2 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:13 | href2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:13 | href2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 = ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 = ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 = ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 = ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:9:19:45 | href2 = ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:28 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:28 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:28 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:28 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:28 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:36 | localStorage.getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:36 | localStorage.getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:36 | localStorage.getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:36 | localStorage.getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:36 | localStorage.getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | exceptional return of localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | exceptional return of localSt ... local') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | exceptional return of localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | exceptional return of localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | exceptional return of localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | localSt ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:17:19:45 | localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:30:19:36 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:30:19:36 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:30:19:36 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:30:19:36 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:30:19:36 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | CalleeFlexibleAccessPath | localStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:19:38:19:44 | 'local' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:13 | href2 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:13 | href2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:13 | href2 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:13 | href2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:13 | href2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | exceptional return of href2.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | exceptional return of href2.indexOf("\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | exceptional return of href2.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | exceptional return of href2.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | exceptional return of href2.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | href2.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | href2.indexOf("\\"") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | href2.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | href2.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:27 | href2.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:34 | href2.i ...  !== -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:34 | href2.i ...  !== -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:34 | href2.i ...  !== -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:34 | href2.i ...  !== -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:9:20:34 | href2.i ...  !== -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:15:20:21 | indexOf | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:15:20:21 | indexOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:15:20:21 | indexOf | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:15:20:21 | indexOf | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:15:20:21 | indexOf | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | CalleeFlexibleAccessPath | href2.indexOf |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:23:20:26 | "\\"" | receiverName | href2 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:33:20:34 | -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:33:20:34 | -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:33:20:34 | -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:33:20:34 | -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:33:20:34 | -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:34:20:34 | 1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:34:20:34 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:34:20:34 | 1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:34:20:34 | 1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:20:34:20:34 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | $('myId ... r</a>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | $('myId ... r</a>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | $('myId ... r</a>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | $('myId ... r</a>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | $('myId ... r</a>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | exceptional return of $('myId ... r</a>") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | exceptional return of $('myId ... r</a>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | exceptional return of $('myId ... r</a>") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | exceptional return of $('myId ... r</a>") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:5:23:58 | exceptional return of $('myId ... r</a>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:7:23:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:15:23:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:15:23:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:15:23:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:15:23:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:15:23:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:33 | "\\n<a href=\\"" | stringConcatenatedWith |  -endpoint- href2 + '>foobar</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:41 | "\\n<a h ... + href2 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:41 | "\\n<a h ... + href2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:41 | "\\n<a h ... + href2 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:41 | "\\n<a h ... + href2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:41 | "\\n<a h ... + href2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:20:23:57 | "\\n<a h ... ar</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:37:23:41 | href2 | stringConcatenatedWith | '\n<a href="' -endpoint- '>foobar</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:23:45:23:57 | ">foobar</a>" | stringConcatenatedWith | '\n<a href="' + href2 -endpoint-  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:13 | href3 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:13 | href3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:13 | href3 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:13 | href3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:13 | href3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 = ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 = ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 = ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 = ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:9:25:45 | href3 = ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:28 | localStorage | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:28 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:28 | localStorage | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:28 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:28 | localStorage | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:36 | localStorage.getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:36 | localStorage.getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:36 | localStorage.getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:36 | localStorage.getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:36 | localStorage.getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | exceptional return of localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | exceptional return of localSt ... local') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | exceptional return of localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | exceptional return of localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | exceptional return of localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | localSt ... local') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | localSt ... local') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | localSt ... local') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | localSt ... local') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:17:25:45 | localSt ... local') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:30:25:36 | getItem | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:30:25:36 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:30:25:36 | getItem | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:30:25:36 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:30:25:36 | getItem | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | CalleeFlexibleAccessPath | localStorage.getItem |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:25:38:25:44 | 'local' | receiverName | localStorage |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:13 | href3 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:13 | href3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:13 | href3 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:13 | href3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:13 | href3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | exceptional return of href3.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | exceptional return of href3.indexOf("\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | exceptional return of href3.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | exceptional return of href3.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | exceptional return of href3.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | href3.indexOf("\\"") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | href3.indexOf("\\"") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | href3.indexOf("\\"") | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | href3.indexOf("\\"") | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:27 | href3.indexOf("\\"") | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:34 | href3.i ...  !== -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:34 | href3.i ...  !== -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:34 | href3.i ...  !== -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:34 | href3.i ...  !== -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:9:26:34 | href3.i ...  !== -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:15:26:21 | indexOf | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:15:26:21 | indexOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:15:26:21 | indexOf | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:15:26:21 | indexOf | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:15:26:21 | indexOf | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | CalleeFlexibleAccessPath | href3.indexOf |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:23:26:26 | "\\"" | receiverName | href3 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:33:26:34 | -1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:33:26:34 | -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:33:26:34 | -1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:33:26:34 | -1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:33:26:34 | -1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:34:26:34 | 1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:34:26:34 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:34:26:34 | 1 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:34:26:34 | 1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:26:34:26:34 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:5 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:5 | $ | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:5 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | exceptional return of $('myId') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:13 | exceptional return of $('myId') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:18 | $('myId').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:18 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:18 | $('myId').html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:18 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:18 | $('myId').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | $('myId ... '</a>') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | $('myId ... '</a>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | $('myId ... '</a>') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | $('myId ... '</a>') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | $('myId ... '</a>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | exceptional return of $('myId ... '</a>') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | exceptional return of $('myId ... '</a>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | exceptional return of $('myId ... '</a>') | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | exceptional return of $('myId ... '</a>') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:5:29:74 | exceptional return of $('myId ... '</a>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:7:29:12 | 'myId' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:15:29:18 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:15:29:18 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:15:29:18 | html | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:15:29:18 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:15:29:18 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:35 | '\\r\\n<a href="/' | stringConcatenatedWith |  -endpoint- href3 + '">' + 'something' + '</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:43 | '\\r\\n<a ... + href3 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:43 | '\\r\\n<a ... + href3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:43 | '\\r\\n<a ... + href3 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:43 | '\\r\\n<a ... + href3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:43 | '\\r\\n<a ... + href3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:50 | '\\r\\n<a ...  + '">' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:50 | '\\r\\n<a ...  + '">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:50 | '\\r\\n<a ...  + '">' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:50 | '\\r\\n<a ...  + '">' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:50 | '\\r\\n<a ...  + '">' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:64 | '\\r\\n<a ... ething" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:64 | '\\r\\n<a ... ething" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:64 | '\\r\\n<a ... ething" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:64 | '\\r\\n<a ... ething" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:64 | '\\r\\n<a ... ething" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:20:29:73 | '\\r\\n<a ...  '</a>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:39:29:43 | href3 | stringConcatenatedWith | '\r\n<a href="/' -endpoint- '">' + 'something' + '</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:47:29:50 | '">' | stringConcatenatedWith | '\r\n<a href="/' + href3 -endpoint- 'something' + '</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:54:29:64 | "something" | stringConcatenatedWith | '\r\n<a href="/' + href3 + '">' -endpoint- '</a>' |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | enclosingFunctionBody | sessionStorage setItem session document location search localStorage setItem local document location search $ myId html sessionStorage getItem session $ myId html localStorage getItem session $ myId html sessionStorage getItem local $ myId html localStorage getItem local href localStorage getItem local $ myId html <a href=" href >foobar</a> href indexOf " 1 $ myId html <a href=" href /> href2 localStorage getItem local href2 indexOf " 1 $ myId html \n<a href=" href2 >foobar</a> href3 localStorage getItem local href3 indexOf " 1 $ myId html \r\n<a href="/ href3 "> something </a> |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/stored-xss.js:29:68:29:73 | '</a>' | stringConcatenatedWith | '\r\n<a href="/' + href3 + '">' + 'something' -endpoint-  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | documen ... eAt(0)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | documen ... eAt(0)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | documen ... eAt(0)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | exceptional return of documen ... eAt(0)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | exceptional return of documen ... eAt(0)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:1:1:52 | exceptional return of documen ... eAt(0)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:10:1:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:10:1:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:10:1:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:48 | documen ... rCodeAt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:48 | documen ... rCodeAt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:48 | documen ... rCodeAt | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | documen ... deAt(0) | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | exceptional return of documen ... deAt(0) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | exceptional return of documen ... deAt(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:16:1:51 | exceptional return of documen ... deAt(0) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:25:1:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:25:1:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:25:1:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:34:1:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:34:1:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:34:1:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:39:1:48 | charCodeAt | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:39:1:48 | charCodeAt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:39:1:48 | charCodeAt | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:50:1:50 | 0 | CalleeFlexibleAccessPath | document.location.href.charCodeAt |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:50:1:50 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:50:1:50 | 0 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:50:1:50 | 0 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:1:50:1:50 | 0 | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | documen ... cation) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | documen ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | documen ... cation) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | exceptional return of documen ... cation) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | exceptional return of documen ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:1:3:33 | exceptional return of documen ... cation) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:10:3:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:10:3:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:10:3:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:16:3:32 | document.location | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:25:3:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:25:3:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:3:25:3:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | documen ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | documen ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | documen ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | exceptional return of documen ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | exceptional return of documen ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:1:4:38 | exceptional return of documen ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:10:4:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:10:4:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:10:4:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:16:4:37 | documen ... on.href | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:25:4:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:25:4:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:25:4:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:34:4:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:34:4:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:4:34:4:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | documen ... ueOf()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | documen ... ueOf()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | documen ... ueOf()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | exceptional return of documen ... ueOf()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | exceptional return of documen ... ueOf()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:1:5:48 | exceptional return of documen ... ueOf()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:10:5:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:10:5:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:10:5:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:45 | documen ... valueOf | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:45 | documen ... valueOf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:45 | documen ... valueOf | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | documen ... lueOf() | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | exceptional return of documen ... lueOf() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | exceptional return of documen ... lueOf() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:16:5:47 | exceptional return of documen ... lueOf() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:25:5:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:25:5:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:25:5:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:34:5:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:34:5:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:34:5:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:39:5:45 | valueOf | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:39:5:45 | valueOf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:5:39:5:45 | valueOf | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | documen ... .sup()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | documen ... .sup()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | documen ... .sup()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | exceptional return of documen ... .sup()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | exceptional return of documen ... .sup()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:1:6:44 | exceptional return of documen ... .sup()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:10:6:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:10:6:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:10:6:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:41 | documen ... ref.sup | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:41 | documen ... ref.sup | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:41 | documen ... ref.sup | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | documen ... f.sup() | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | exceptional return of documen ... f.sup() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | exceptional return of documen ... f.sup() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:16:6:43 | exceptional return of documen ... f.sup() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:25:6:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:25:6:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:25:6:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:34:6:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:34:6:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:34:6:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:39:6:41 | sup | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:39:6:41 | sup | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:6:39:6:41 | sup | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | documen ... Case()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | documen ... Case()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | documen ... Case()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | exceptional return of documen ... Case()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | exceptional return of documen ... Case()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:1:7:52 | exceptional return of documen ... Case()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:10:7:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:10:7:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:10:7:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:49 | documen ... perCase | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:49 | documen ... perCase | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:49 | documen ... perCase | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | documen ... rCase() | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | exceptional return of documen ... rCase() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | exceptional return of documen ... rCase() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:16:7:51 | exceptional return of documen ... rCase() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:25:7:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:25:7:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:25:7:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:34:7:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:34:7:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:34:7:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:39:7:49 | toUpperCase | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:39:7:49 | toUpperCase | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:7:39:7:49 | toUpperCase | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | documen ... Left()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | documen ... Left()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | documen ... Left()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | exceptional return of documen ... Left()) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | exceptional return of documen ... Left()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:1:8:49 | exceptional return of documen ... Left()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:10:8:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:10:8:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:10:8:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:23 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:32 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:37 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:37 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:37 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:46 | documen ... rimLeft | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:46 | documen ... rimLeft | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:46 | documen ... rimLeft | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | documen ... mLeft() | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | exceptional return of documen ... mLeft() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | exceptional return of documen ... mLeft() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:16:8:48 | exceptional return of documen ... mLeft() | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:25:8:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:25:8:32 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:25:8:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:34:8:37 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:34:8:37 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:34:8:37 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:39:8:46 | trimLeft | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:39:8:46 | trimLeft | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:8:39:8:46 | trimLeft | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | exceptional return of documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | exceptional return of documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:1:9:59 | exceptional return of documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:10:9:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:10:9:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:10:9:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:21 | String | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:21 | String | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:21 | String | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:34 | String.fromCharCode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:34 | String.fromCharCode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:34 | String.fromCharCode | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | String. ... n.href) | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | exceptional return of String. ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | exceptional return of String. ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:16:9:58 | exceptional return of String. ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:23:9:34 | fromCharCode | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:23:9:34 | fromCharCode | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:23:9:34 | fromCharCode | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:43 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:43 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:43 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:52 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:52 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:52 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | CalleeFlexibleAccessPath | String.fromCharCode |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:36:9:57 | documen ... on.href | receiverName | String |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:45:9:52 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:45:9:52 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:45:9:52 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:54:9:57 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:54:9:57 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:9:54:9:57 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | exceptional return of documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | exceptional return of documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:1:10:46 | exceptional return of documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:10:10:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:10:10:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:10:10:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:21 | String | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:21 | String | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:21 | String | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | String( ... n.href) | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | exceptional return of String( ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | exceptional return of String( ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:16:10:45 | exceptional return of String( ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:30 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:30 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:30 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:39 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:39 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:39 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:44 | documen ... on.href | CalleeFlexibleAccessPath | String |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:44 | documen ... on.href | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:44 | documen ... on.href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:44 | documen ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:23:10:44 | documen ... on.href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:32:10:39 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:32:10:39 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:32:10:39 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:41:10:44 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:41:10:44 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:10:41:10:44 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | exceptional return of documen ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | exceptional return of documen ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:1:11:46 | exceptional return of documen ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:10:11:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:10:11:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:10:11:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:21 | escape | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:21 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:21 | escape | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | escape( ... n.href) | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | exceptional return of escape( ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | exceptional return of escape( ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:16:11:45 | exceptional return of escape( ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:30 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:30 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:30 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:39 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:39 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:23:11:39 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:32:11:39 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:32:11:39 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:32:11:39 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:41:11:44 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:41:11:44 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:11:41:11:44 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:8 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:8 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:8 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:14 | document.write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:14 | document.write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:14 | document.write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | documen ... ref)))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | documen ... ref)))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | documen ... ref)))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | exceptional return of documen ... ref)))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | exceptional return of documen ... ref)))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:1:12:62 | exceptional return of documen ... ref)))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:10:12:14 | write | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:10:12:14 | write | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:10:12:14 | write | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:21 | escape | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:21 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:21 | escape | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | escape( ... href))) | receiverName | document |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | exceptional return of escape( ... href))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | exceptional return of escape( ... href))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:16:12:61 | exceptional return of escape( ... href))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:28 | escape | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:28 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:28 | escape | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:60 | exceptional return of escape( ... .href)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:60 | exceptional return of escape( ... .href)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:23:12:60 | exceptional return of escape( ... .href)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:35 | escape | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:35 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:35 | escape | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:59 | exceptional return of escape( ... n.href) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:59 | exceptional return of escape( ... n.href) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:30:12:59 | exceptional return of escape( ... n.href) | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:44 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:44 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:44 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:53 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:53 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:37:12:53 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:46:12:53 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:46:12:53 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:46:12:53 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:55:12:58 | href | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:55:12:58 | href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/string-manipulations.js:12:55:12:58 | href | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:2 | (functi ... )]);\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:2 | (functi ... )]);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:2 | (functi ... )]);\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | (functi ... );\\n})() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:1:12:4 | exceptional return of (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:1:1 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:1:1 | this | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:1:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | 'arguments' object of anonymous function | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | exceptional return of anonymous function | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | functio ... ')]);\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | functio ... ')]);\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | functio ... ')]);\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | return of anonymous function | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:1:2:12:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:2:15 | translate | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:2:15 | translate | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:2:15 | translate | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:2:15 | translate | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:2:15 | translate | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | transla ... nt"\\n  } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | transla ... nt"\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | transla ... nt"\\n  } | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | transla ... nt"\\n  } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | transla ... nt"\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | translate | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | translate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | translate | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | translate | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:7:5:3 | translate | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:19:5:3 | {\\n    " ... nt"\\n  } | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:19:5:3 | {\\n    " ... nt"\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:2:19:5:3 | {\\n    " ... nt"\\n  } | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:2:19:5:3 | {\\n    " ... nt"\\n  } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:2:19:5:3 | {\\n    " ... nt"\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:14 | "own goal" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:14 | "own goal" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:14 | "own goal" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:14 | "own goal" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:14 | "own goal" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:5:3:26 | "own go ... ckpass" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | assignedToPropName | own goal |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:3:17:3:26 | "backpass" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:12 | "fumble" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:12 | "fumble" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:12 | "fumble" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:12 | "fumble" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:12 | "fumble" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:5:4:21 | "fumble": "feint" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | assignedToPropName | fumble |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:4:15:4:21 | "feint" | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:12 | target | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:12 | target | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:12 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target  ... .search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target  ... .search | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target  ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:7:6:39 | target  ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:23 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:23 | document | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:23 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:32 | document.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:32 | document.location | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:32 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:39 | documen ... .search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:39 | documen ... .search | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:39 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:16:6:39 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:25:6:32 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:25:6:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:25:6:32 | location | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:25:6:32 | location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:25:6:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:34:6:39 | search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:34:6:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:6:34:6:39 | search | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:6:34:6:39 | search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:6:34:6:39 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:18 | searchParams | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:18 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:18 | searchParams | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:18 | searchParams | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:18 | searchParams | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchP ... ing(1)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchP ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchP ... ing(1)) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchP ... ing(1)) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchP ... ing(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchParams | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchParams | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchParams | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchParams | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:7:7:61 | searchParams | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | exceptional return of new URL ... ing(1)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | exceptional return of new URL ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | exceptional return of new URL ... ing(1)) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | exceptional return of new URL ... ing(1)) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | exceptional return of new URL ... ing(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | new URL ... ing(1)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | new URL ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | new URL ... ing(1)) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | new URL ... ing(1)) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:22:7:61 | new URL ... ing(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:26:7:40 | URLSearchParams | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:26:7:40 | URLSearchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:26:7:40 | URLSearchParams | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:26:7:40 | URLSearchParams | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:26:7:40 | URLSearchParams | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:47 | target | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:47 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:47 | target | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:47 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:47 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:57 | target.substring | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:57 | target.substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:57 | target.substring | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:57 | target.substring | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:57 | target.substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | exceptional return of target.substring(1) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | exceptional return of target.substring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | exceptional return of target.substring(1) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | exceptional return of target.substring(1) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | exceptional return of target.substring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | CalleeFlexibleAccessPath | URLSearchParams |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:42:7:60 | target.substring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:49:7:57 | substring | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:49:7:57 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:49:7:57 | substring | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:49:7:57 | substring | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:49:7:57 | substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | CalleeFlexibleAccessPath | target.substring |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:7:59:7:59 | 1 | receiverName | target |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:3 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:3 | $ | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | $('original-term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | $('original-term') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | $('original-term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | $('original-term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | $('original-term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | exceptional return of $('original-term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | exceptional return of $('original-term') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | exceptional return of $('original-term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | exceptional return of $('original-term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:20 | exceptional return of $('original-term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:25 | $('orig ... ').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:25 | $('orig ... ').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:25 | $('orig ... ').html | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:25 | $('orig ... ').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:25 | $('orig ... ').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | $('orig ... term')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | $('orig ... term')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | $('orig ... term')) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | $('orig ... term')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | $('orig ... term')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | exceptional return of $('orig ... term')) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | exceptional return of $('orig ... term')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | exceptional return of $('orig ... term')) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | exceptional return of $('orig ... term')) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:3:9:51 | exceptional return of $('orig ... term')) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:5:9:19 | 'original-term' | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:22:9:25 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:22:9:25 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:22:9:25 | html | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:22:9:25 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:22:9:25 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:38 | searchParams | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:38 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:38 | searchParams | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:38 | searchParams | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:38 | searchParams | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:42 | searchParams.get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:42 | searchParams.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:42 | searchParams.get | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:42 | searchParams.get | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:42 | searchParams.get | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | exceptional return of searchP ... 'term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | exceptional return of searchP ... 'term') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | exceptional return of searchP ... 'term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | exceptional return of searchP ... 'term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | exceptional return of searchP ... 'term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:27:9:50 | searchP ... 'term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:40:9:42 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:40:9:42 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:40:9:42 | get | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:40:9:42 | get | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:40:9:42 | get | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | CalleeFlexibleAccessPath | searchParams.get |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:9:44:9:49 | 'term' | receiverName | searchParams |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:3 | $ | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:3 | $ | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | $('translated-term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | $('translated-term') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | $('translated-term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | $('translated-term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | $('translated-term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | exceptional return of $('translated-term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | exceptional return of $('translated-term') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | exceptional return of $('translated-term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | exceptional return of $('translated-term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:22 | exceptional return of $('translated-term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:27 | $('tran ... ').html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:27 | $('tran ... ').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:27 | $('tran ... ').html | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:27 | $('tran ... ').html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:27 | $('tran ... ').html | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | $('tran ... erm')]) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | $('tran ... erm')]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | $('tran ... erm')]) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | $('tran ... erm')]) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | $('tran ... erm')]) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | exceptional return of $('tran ... erm')]) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | exceptional return of $('tran ... erm')]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | exceptional return of $('tran ... erm')]) | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | exceptional return of $('tran ... erm')]) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:3:11:64 | exceptional return of $('tran ... erm')]) | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:5:11:21 | 'translated-term' | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:24:11:27 | html | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:24:11:27 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:24:11:27 | html | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:24:11:27 | html | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:24:11:27 | html | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:37 | translate | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:37 | translate | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:37 | translate | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:37 | translate | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:37 | translate | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:29:11:63 | transla ... term')] | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:50 | searchParams | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:50 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:50 | searchParams | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:50 | searchParams | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:50 | searchParams | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:54 | searchParams.get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:54 | searchParams.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:54 | searchParams.get | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:54 | searchParams.get | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:54 | searchParams.get | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | exceptional return of searchP ... 'term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | exceptional return of searchP ... 'term') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | exceptional return of searchP ... 'term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | exceptional return of searchP ... 'term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | exceptional return of searchP ... 'term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | searchP ... 'term') | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | searchP ... 'term') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | searchP ... 'term') | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | searchP ... 'term') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:39:11:62 | searchP ... 'term') | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:52:11:54 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:52:11:54 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:52:11:54 | get | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:52:11:54 | get | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:52:11:54 | get | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | CalleeFlexibleAccessPath | searchParams.get |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | enclosingFunctionBody | translate own goal backpass fumble feint target document location search searchParams URLSearchParams target substring 1 $ original-term html searchParams get term $ translated-term html translate searchParams get term |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | fileImports |  |
| autogenerated/Xss/DomBasedXss/translate.js:11:56:11:61 | 'term' | receiverName | searchParams |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:1:0 | this | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:2 | (functi ... e');\\n}) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:2 | (functi ... e');\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:2 | (functi ... e');\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | (functi ... );\\n})() | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:1:10:4 | exceptional return of (functi ... );\\n})() | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:1:1 | this | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:1:1 | this | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:1:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | exceptional return of anonymous function | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | exceptional return of anonymous function | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | functio ... fe');\\n} | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | functio ... fe');\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | functio ... fe');\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | return of anonymous function | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | return of anonymous function | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:1:2:10:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:17 | policy1 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:17 | policy1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:17 | policy1 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:17 | policy1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:17 | policy1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 ... => x }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:11:2:74 | policy1 ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:32 | trustedTypes | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:32 | trustedTypes | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:32 | trustedTypes | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:32 | trustedTypes | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:32 | trustedTypes | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:45 | trusted ... ePolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:45 | trusted ... ePolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:45 | trusted ... ePolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:45 | trusted ... ePolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:45 | trusted ... ePolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | exceptional return of trusted ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | exceptional return of trusted ... => x }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | exceptional return of trusted ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | exceptional return of trusted ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | exceptional return of trusted ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | trusted ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | trusted ... => x }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | trusted ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | trusted ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:21:2:74 | trusted ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:34:2:45 | createPolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:34:2:45 | createPolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:34:2:45 | createPolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:34:2:45 | createPolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:34:2:45 | createPolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:47:2:49 | 'x' | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:52:2:73 | { creat ...  => x } | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:63 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:63 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:63 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:63 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:63 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:54:2:71 | createHTML: x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:66 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | 'arguments' object of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | 'arguments' object of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | 'arguments' object of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | 'arguments' object of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | 'arguments' object of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | exceptional return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | exceptional return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | exceptional return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | exceptional return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | exceptional return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | InputAccessPathFromCallee | 1.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | assignedToPropName | createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:66:2:71 | x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:71:2:71 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:71:2:71 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:71:2:71 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:71:2:71 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:2:71:2:71 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:11 | policy1 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:11 | policy1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:11 | policy1 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:11 | policy1 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:11 | policy1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:22 | policy1.createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:22 | policy1.createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:22 | policy1.createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:22 | policy1.createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:22 | policy1.createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | exceptional return of policy1 ... w.name) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | exceptional return of policy1 ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | exceptional return of policy1 ... w.name) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | exceptional return of policy1 ... w.name) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | exceptional return of policy1 ... w.name) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | policy1 ... w.name) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | policy1 ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | policy1 ... w.name) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | policy1 ... w.name) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:5:3:35 | policy1 ... w.name) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:13:3:22 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:13:3:22 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:13:3:22 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:13:3:22 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:13:3:22 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:29 | window | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:29 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:29 | window | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:29 | window | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:29 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | CalleeFlexibleAccessPath | policy1.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:24:3:34 | window.name | receiverName | policy1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:31:3:34 | name | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:31:3:34 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:31:3:34 | name | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:31:3:34 | name | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:3:31:3:34 | name | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:17 | policy2 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:17 | policy2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:17 | policy2 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:17 | policy2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:17 | policy2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 ... afe' }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 ... afe' }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 ... afe' }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 ... afe' }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:11:5:79 | policy2 ... afe' }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:32 | trustedTypes | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:32 | trustedTypes | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:32 | trustedTypes | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:32 | trustedTypes | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:32 | trustedTypes | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:45 | trusted ... ePolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:45 | trusted ... ePolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:45 | trusted ... ePolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:45 | trusted ... ePolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:45 | trusted ... ePolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | exceptional return of trusted ... afe' }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | exceptional return of trusted ... afe' }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | exceptional return of trusted ... afe' }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | exceptional return of trusted ... afe' }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | exceptional return of trusted ... afe' }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | trusted ... afe' }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | trusted ... afe' }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | trusted ... afe' }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | trusted ... afe' }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:21:5:79 | trusted ... afe' }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:34:5:45 | createPolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:34:5:45 | createPolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:34:5:45 | createPolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:34:5:45 | createPolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:34:5:45 | createPolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:47:5:49 | 'x' | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:52:5:78 | { creat ... safe' } | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:63 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:63 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:63 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:63 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:63 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:54:5:76 | createH ...  'safe' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:66 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:66 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:66 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:66 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:66 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | 'arguments' object of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | 'arguments' object of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | 'arguments' object of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | 'arguments' object of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | 'arguments' object of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | exceptional return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | exceptional return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | exceptional return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | exceptional return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | exceptional return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | InputAccessPathFromCallee | 1.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | assignedToPropName | createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:66:5:76 | x => 'safe' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:71:5:76 | 'safe' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:71:5:76 | 'safe' | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:71:5:76 | 'safe' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:71:5:76 | 'safe' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:5:71:5:76 | 'safe' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:11 | policy2 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:11 | policy2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:11 | policy2 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:11 | policy2 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:11 | policy2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:22 | policy2.createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:22 | policy2.createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:22 | policy2.createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:22 | policy2.createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:22 | policy2.createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | exceptional return of policy2 ... w.name) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | exceptional return of policy2 ... w.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | exceptional return of policy2 ... w.name) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | exceptional return of policy2 ... w.name) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | exceptional return of policy2 ... w.name) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | policy2 ... w.name) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | policy2 ... w.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | policy2 ... w.name) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | policy2 ... w.name) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:5:6:35 | policy2 ... w.name) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:13:6:22 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:13:6:22 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:13:6:22 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:13:6:22 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:13:6:22 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:29 | window | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:29 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:29 | window | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:29 | window | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:29 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | CalleeFlexibleAccessPath | policy2.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:24:6:34 | window.name | receiverName | policy2 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:31:6:34 | name | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:31:6:34 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:31:6:34 | name | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:31:6:34 | name | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:6:31:6:34 | name | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:17 | policy3 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:17 | policy3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:17 | policy3 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:17 | policy3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:17 | policy3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 ... => x }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:11:8:74 | policy3 ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:32 | trustedTypes | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:32 | trustedTypes | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:32 | trustedTypes | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:32 | trustedTypes | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:32 | trustedTypes | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:45 | trusted ... ePolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:45 | trusted ... ePolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:45 | trusted ... ePolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:45 | trusted ... ePolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:45 | trusted ... ePolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | exceptional return of trusted ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | exceptional return of trusted ... => x }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | exceptional return of trusted ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | exceptional return of trusted ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | exceptional return of trusted ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | trusted ... => x }) | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | trusted ... => x }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | trusted ... => x }) | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | trusted ... => x }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:21:8:74 | trusted ... => x }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:34:8:45 | createPolicy | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:34:8:45 | createPolicy | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:34:8:45 | createPolicy | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:34:8:45 | createPolicy | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:34:8:45 | createPolicy | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:47:8:49 | 'x' | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:52:8:73 | { creat ...  => x } | receiverName | trustedTypes |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:63 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:63 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:63 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:63 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:63 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:54:8:71 | createHTML: x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:66 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | 'arguments' object of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | 'arguments' object of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | 'arguments' object of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | 'arguments' object of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | 'arguments' object of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | exceptional return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | exceptional return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | exceptional return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | exceptional return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | exceptional return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | return of method createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | return of method createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | return of method createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | return of method createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | return of method createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | CalleeFlexibleAccessPath | trustedTypes.createPolicy |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | InputAccessPathFromCallee | 1.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | assignedToPropName | createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:66:8:71 | x => x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:71:8:71 | x | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:71:8:71 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:71:8:71 | x | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:71:8:71 | x | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:8:71:8:71 | x | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:11 | policy3 | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:11 | policy3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:11 | policy3 | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:11 | policy3 | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:11 | policy3 | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:22 | policy3.createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:22 | policy3.createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:22 | policy3.createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:22 | policy3.createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:22 | policy3.createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | exceptional return of policy3 ... 'safe') | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | exceptional return of policy3 ... 'safe') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | exceptional return of policy3 ... 'safe') | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | exceptional return of policy3 ... 'safe') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | exceptional return of policy3 ... 'safe') | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | policy3 ... 'safe') | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | policy3 ... 'safe') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | policy3 ... 'safe') | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | policy3 ... 'safe') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:5:9:30 | policy3 ... 'safe') | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:13:9:22 | createHTML | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:13:9:22 | createHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:13:9:22 | createHTML | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:13:9:22 | createHTML | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:13:9:22 | createHTML | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | CalleeFlexibleAccessPath | policy3.createHTML |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | contextFunctionInterfaces | createHTML(x)\ncreateHTML(x)\ncreateHTML(x) |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | enclosingFunctionBody | policy1 trustedTypes createPolicy x createHTML x x policy1 createHTML window name policy2 trustedTypes createPolicy x createHTML x safe policy2 createHTML window name policy3 trustedTypes createPolicy x createHTML x x policy3 createHTML safe |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | fileImports |  |
| autogenerated/Xss/DomBasedXss/trusted-types.js:9:24:9:29 | 'safe' | receiverName | policy3 |
| autogenerated/Xss/DomBasedXss/tst3.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:7 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:7 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:7 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:40 | foo = d ... ("foo") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:40 | foo = d ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:5:1:40 | foo = d ... ("foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:18 | document | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:18 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:18 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:33 | documen ... entById | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:33 | documen ... entById | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:33 | documen ... entById | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | documen ... ("foo") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | documen ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | documen ... ("foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | exceptional return of documen ... ("foo") | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | exceptional return of documen ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:11:1:40 | exceptional return of documen ... ("foo") | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:20:1:33 | getElementById | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:20:1:33 | getElementById | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:20:1:33 | getElementById | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:1:35:1:39 | "foo" | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:8 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:8 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:8 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:75 | data =  ... tr(1))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:75 | data =  ... tr(1))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:5:2:75 | data =  ... tr(1))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:15 | JSON | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:15 | JSON | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:15 | JSON | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:21 | JSON.parse | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:21 | JSON.parse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:21 | JSON.parse | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | exceptional return of JSON.pa ... tr(1))) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | exceptional return of JSON.pa ... tr(1))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:12:2:75 | exceptional return of JSON.pa ... tr(1))) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:17:2:21 | parse | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:17:2:21 | parse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:17:2:21 | parse | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:40 | decodeURIComponent | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:40 | decodeURIComponent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:40 | decodeURIComponent | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | decodeU ... str(1)) | receiverName | JSON |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | exceptional return of decodeU ... str(1)) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | exceptional return of decodeU ... str(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:23:2:74 | exceptional return of decodeU ... str(1)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:47 | window | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:47 | window | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:47 | window | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:56 | window.location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:56 | window.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:56 | window.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:63 | window. ... .search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:63 | window. ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:63 | window. ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:70 | window. ... .substr | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:70 | window. ... .substr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:70 | window. ... .substr | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | exceptional return of window. ... bstr(1) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | exceptional return of window. ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | exceptional return of window. ... bstr(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | window. ... bstr(1) | CalleeFlexibleAccessPath | decodeURIComponent |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | window. ... bstr(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | window. ... bstr(1) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | window. ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:42:2:73 | window. ... bstr(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:49:2:56 | location | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:49:2:56 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:49:2:56 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:58:2:63 | search | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:58:2:63 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:58:2:63 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:65:2:70 | substr | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:65:2:70 | substr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:65:2:70 | substr | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:72:2:72 | 1 | CalleeFlexibleAccessPath | window.location.search.substr |
| autogenerated/Xss/DomBasedXss/tst3.js:2:72:2:72 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:2:72:2:72 | 1 | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:72:2:72 | 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:2:72:2:72 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:16 | foo.setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:16 | foo.setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:16 | foo.setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | exceptional return of foo.set ... ta.src) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | exceptional return of foo.set ... ta.src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | exceptional return of foo.set ... ta.src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | foo.set ... ta.src) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | foo.set ... ta.src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:1:4:33 | foo.set ... ta.src) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:5:4:16 | setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:5:4:16 | setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:5:4:16 | setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:18:4:22 | "src" | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:28 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:28 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:28 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:25:4:32 | data.src | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:4:30:4:32 | src | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:30:4:32 | src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:4:30:4:32 | src | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:16 | foo.setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:16 | foo.setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:16 | foo.setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | exceptional return of foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | exceptional return of foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | exceptional return of foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:1:5:32 | foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:5:5:16 | setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:5:5:16 | setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:5:5:16 | setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:18:5:23 | "HREF" | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:29 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:29 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:29 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:26:5:31 | data.p | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:5:31:5:31 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:31:5:31 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:5:31:5:31 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:16 | foo.setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:16 | foo.setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:16 | foo.setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | exceptional return of foo.set ... data.w) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | exceptional return of foo.set ... data.w) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | exceptional return of foo.set ... data.w) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | foo.set ... data.w) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | foo.set ... data.w) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:1:6:33 | foo.set ... data.w) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:5:6:16 | setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:5:6:16 | setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:5:6:16 | setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:18:6:24 | "width" | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:30 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:30 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:30 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:27:6:32 | data.w | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:6:32:6:32 | w | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:32:6:32 | w | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:6:32:6:32 | w | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:16 | foo.setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:16 | foo.setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:16 | foo.setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | exceptional return of foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | exceptional return of foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | exceptional return of foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:1:7:38 | foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:5:7:16 | setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:5:7:16 | setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:5:7:16 | setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:18:7:29 | "xlink:href" | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:35 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:35 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:35 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:32:7:37 | data.p | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:7:37:7:37 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:37:7:37 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:7:37:7:37 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:18 | foo.setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:18 | foo.setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:18 | foo.setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | exceptional return of foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | exceptional return of foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | exceptional return of foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:1:9:43 | foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:5:9:18 | setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:5:9:18 | setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:5:9:18 | setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:20:9:26 | 'xlink' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:29:9:34 | 'href' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:40 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:40 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:40 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:37:9:42 | data.p | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:9:42:9:42 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:42:9:42 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:9:42:9:42 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:18 | foo.setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:18 | foo.setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:18 | foo.setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | exceptional return of foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | exceptional return of foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | exceptional return of foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | foo.set ... data.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | foo.set ... data.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:1:10:44 | foo.set ... data.p) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:5:10:18 | setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:5:10:18 | setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:5:10:18 | setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:20:10:27 | 'foobar' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:30:10:35 | 'href' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:41 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:41 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:41 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:38:10:43 | data.p | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:10:43:10:43 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:43:10:43 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:10:43:10:43 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:3 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:3 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:18 | foo.setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:18 | foo.setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:18 | foo.setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | exceptional return of foo.set ... data.w) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | exceptional return of foo.set ... data.w) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | exceptional return of foo.set ... data.w) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | foo.set ... data.w) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | foo.set ... data.w) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:1:11:42 | foo.set ... data.w) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:5:11:18 | setAttributeNS | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:5:11:18 | setAttributeNS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:5:11:18 | setAttributeNS | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:20:11:24 | 'baz' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:27:11:33 | 'width' | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:39 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:39 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:39 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | CalleeFlexibleAccessPath | foo.setAttributeNS |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:36:11:41 | data.w | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:11:41:11:41 | w | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:41:11:41 | w | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:11:41:11:41 | w | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:10:14:10 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:15:14:18 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:15:14:18 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:14:15:14:18 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:5 | foo | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:5 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:5 | foo | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:18 | foo.setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:18 | foo.setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:18 | foo.setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | exceptional return of foo.set ... ata[p]) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | exceptional return of foo.set ... ata[p]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | exceptional return of foo.set ... ata[p]) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | foo.set ... ata[p]) | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | foo.set ... ata[p]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:3:15:30 | foo.set ... ata[p]) | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:7:15:18 | setAttribute | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:7:15:18 | setAttribute | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:7:15:18 | setAttribute | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:20:15:20 | p | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:26 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:26 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:26 | data | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | CalleeFlexibleAccessPath | foo.setAttribute |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:23:15:29 | data[p] | receiverName | foo |
| autogenerated/Xss/DomBasedXss/tst3.js:15:28:15:28 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:28:15:28 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst3.js:15:28:15:28 | p | fileImports |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | ansiToHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | ansiToHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | ansiToHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | require | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:1:1 | require | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | 'arguments' object of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | 'arguments' object of function test | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | 'arguments' object of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | exceptional return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | exceptional return of function test | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | exceptional return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | return of function test | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:1:1:22:1 | return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:1:10:1:13 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:1:10:1:13 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:12 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:12 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target  ... .search | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target  ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:7:2:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:23 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:23 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:32 | document.location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:32 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:39 | documen ... .search | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:39 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:16:2:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:25:2:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:25:2:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:25:2:32 | location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:25:2:32 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:25:2:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:2:34:2:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:2:34:2:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:2:34:2:39 | search | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:2:34:2:39 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:2:34:2:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | exceptional return of $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | exceptional return of $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:3:5:24 | exceptional return of $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:5:5:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:13:5:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:13:5:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:13:5:16 | html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:13:5:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:13:5:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:5:18:5:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:10 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:10 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:16 | document.write | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:16 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | documen ... TION>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | documen ... TION>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | documen ... TION>") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | documen ... TION>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | documen ... TION>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | exceptional return of documen ... TION>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | exceptional return of documen ... TION>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | exceptional return of documen ... TION>") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | exceptional return of documen ... TION>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:3:8:127 | exceptional return of documen ... TION>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:12:8:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:12:8:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:12:8:16 | write | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:12:8:16 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:12:8:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:35 | "<OPTION value=1>" | stringConcatenatedWith |  -endpoint- document.location.href.substring() + '</OPTION>' |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:114 | "<OPTIO ... t=")+8) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:114 | "<OPTIO ... t=")+8) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:114 | "<OPTIO ... t=")+8) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:114 | "<OPTIO ... t=")+8) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:114 | "<OPTIO ... t=")+8) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:18:8:126 | "<OPTIO ... PTION>" | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:44 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:44 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:44 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:44 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:44 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:53 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:53 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:53 | document.location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:53 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:53 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:58 | documen ... on.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:58 | documen ... on.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:58 | documen ... on.href | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:58 | documen ... on.href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:58 | documen ... on.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:68 | documen ... bstring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:68 | documen ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:68 | documen ... bstring | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:68 | documen ... bstring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:68 | documen ... bstring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | documen ... t=")+8) | stringConcatenatedWith | '<OPTION value=1>' -endpoint- '</OPTION>' |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | exceptional return of documen ... t=")+8) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | exceptional return of documen ... t=")+8) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | exceptional return of documen ... t=")+8) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | exceptional return of documen ... t=")+8) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:37:8:114 | exceptional return of documen ... t=")+8) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:46:8:53 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:46:8:53 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:46:8:53 | location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:46:8:53 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:46:8:53 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:55:8:58 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:55:8:58 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:55:8:58 | href | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:55:8:58 | href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:55:8:58 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:60:8:68 | substring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:60:8:68 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:60:8:68 | substring | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:60:8:68 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:60:8:68 | substring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:77 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:77 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:77 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:77 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:77 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:86 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:86 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:86 | document.location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:86 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:86 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:91 | documen ... on.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:91 | documen ... on.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:91 | documen ... on.href | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:91 | documen ... on.href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:91 | documen ... on.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | documen ... ault=") | stringConcatenatedWith |  -endpoint- ? |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | exceptional return of documen ... ault=") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | exceptional return of documen ... ault=") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | exceptional return of documen ... ault=") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | exceptional return of documen ... ault=") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:111 | exceptional return of documen ... ault=") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | CalleeFlexibleAccessPath | document.location.href.substring |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:70:8:113 | documen ... lt=")+8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:79:8:86 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:79:8:86 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:79:8:86 | location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:79:8:86 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:79:8:86 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:88:8:91 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:88:8:91 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:88:8:91 | href | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:88:8:91 | href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:88:8:91 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:93:8:99 | indexOf | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:93:8:99 | indexOf | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:93:8:99 | indexOf | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:93:8:99 | indexOf | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:93:8:99 | indexOf | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | CalleeFlexibleAccessPath | document.location.href.indexOf |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:101:8:110 | "default=" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:113:8:113 | 8 | stringConcatenatedWith | document.location.href.indexOf() -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:8:116:8:126 | "</OPTION>" | stringConcatenatedWith | '<OPTION value=1>' + document.location.href.substring() -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:10 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:10 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:16 | document.write | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:16 | document.write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | documen ... TION>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | documen ... TION>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | documen ... TION>") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | documen ... TION>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | documen ... TION>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | exceptional return of documen ... TION>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | exceptional return of documen ... TION>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | exceptional return of documen ... TION>") | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | exceptional return of documen ... TION>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:3:9:52 | exceptional return of documen ... TION>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:12:9:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:12:9:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:9:12:9:16 | write | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:12:9:16 | write | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:12:9:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:9:18:9:51 | "<OPTIO ... PTION>" | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | $('<div ... 'px">') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | exceptional return of $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | exceptional return of $('<div ... 'px">') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | exceptional return of $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | exceptional return of $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:3:12:43 | exceptional return of $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:24 | '<div style="width:' | stringConcatenatedWith |  -endpoint- target + 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:33 | '<div s ...  target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:33 | '<div s ...  target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:33 | '<div s ...  target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:33 | '<div s ...  target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:33 | '<div s ...  target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:5:12:42 | '<div s ...  'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:28:12:33 | target | stringConcatenatedWith | '<div style="width:' -endpoint- 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:12:37:12:42 | 'px">' | stringConcatenatedWith | '<div style="width:' + target -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | $('<div ... 'px">') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | exceptional return of $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | exceptional return of $('<div ... 'px">') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | exceptional return of $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | exceptional return of $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:3:14:44 | exceptional return of $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:24 | '<div style="width:' | stringConcatenatedWith |  -endpoint- ? + 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:34 | '<div s ... +target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:34 | '<div s ... +target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:34 | '<div s ... +target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:34 | '<div s ... +target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:34 | '<div s ... +target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:5:14:43 | '<div s ...  'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:28:14:34 | +target | stringConcatenatedWith | '<div style="width:' -endpoint- 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:14:29:14:34 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:29:14:34 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:29:14:34 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:29:14:34 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:29:14:34 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:14:38:14:43 | 'px">' | stringConcatenatedWith | '<div style="width:' + ? -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | $('<div ... 'px">') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | exceptional return of $('<div ... 'px">') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | exceptional return of $('<div ... 'px">') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | exceptional return of $('<div ... 'px">') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | exceptional return of $('<div ... 'px">') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:3:15:53 | exceptional return of $('<div ... 'px">') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:24 | '<div style="width:' | stringConcatenatedWith |  -endpoint- parseInt() + 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:43 | '<div s ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:43 | '<div s ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:43 | '<div s ... target) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:43 | '<div s ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:43 | '<div s ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:5:15:52 | '<div s ...  'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:35 | parseInt | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:35 | parseInt | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:35 | parseInt | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:35 | parseInt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:35 | parseInt | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | exceptional return of parseInt(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | exceptional return of parseInt(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | exceptional return of parseInt(target) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | exceptional return of parseInt(target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | exceptional return of parseInt(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:28:15:43 | parseInt(target) | stringConcatenatedWith | '<div style="width:' -endpoint- 'px">' |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | CalleeFlexibleAccessPath | parseInt |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:37:15:42 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:15:47:15:52 | 'px">' | stringConcatenatedWith | '<div style="width:' + parseInt() -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:12 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:12 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:12 | params | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:12 | params | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:12 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params  ... hParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params  ... hParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params  ... hParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params  ... hParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:7:17:56 | params  ... hParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:43 | (new UR ... ation)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:43 | (new UR ... ation)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:43 | (new UR ... ation)) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:43 | (new UR ... ation)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:43 | (new UR ... ation)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:56 | (new UR ... hParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:56 | (new UR ... hParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:56 | (new UR ... hParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:56 | (new UR ... hParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:16:17:56 | (new UR ... hParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | exceptional return of new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | exceptional return of new URL ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | exceptional return of new URL ... cation) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | exceptional return of new URL ... cation) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | exceptional return of new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | new URL ... cation) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | new URL ... cation) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | new URL ... cation) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:17:17:42 | new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:21:17:23 | URL | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:21:17:23 | URL | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:21:17:23 | URL | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:21:17:23 | URL | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:21:17:23 | URL | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:32 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:32 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:32 | document | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:32 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:32 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | CalleeFlexibleAccessPath | URL |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:25:17:41 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:34:17:41 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:34:17:41 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:34:17:41 | location | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:34:17:41 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:34:17:41 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:17:45:17:56 | searchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:17:45:17:56 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:17:45:17:56 | searchParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:17:45:17:56 | searchParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:17:45:17:56 | searchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | $('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | $('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | $('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | exceptional return of $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | exceptional return of $('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | exceptional return of $('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | exceptional return of $('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:11 | exceptional return of $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:16 | $('name').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:16 | $('name').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:16 | $('name').html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:16 | $('name').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:16 | $('name').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | $('name ... name')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | $('name ... name')) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | $('name ... name')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | exceptional return of $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | exceptional return of $('name ... name')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | exceptional return of $('name ... name')) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | exceptional return of $('name ... name')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:3:18:36 | exceptional return of $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:5:18:10 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:13:18:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:13:18:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:13:18:16 | html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:13:18:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:13:18:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:23 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:23 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:23 | params | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:23 | params | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:23 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:27 | params.get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:27 | params.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:27 | params.get | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:27 | params.get | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:27 | params.get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | exceptional return of params.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | exceptional return of params.get('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | exceptional return of params.get('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | exceptional return of params.get('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | exceptional return of params.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:18:18:35 | params.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:25:18:27 | get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:25:18:27 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:25:18:27 | get | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:25:18:27 | get | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:25:18:27 | get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | CalleeFlexibleAccessPath | params.get |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:18:29:18:34 | 'name' | receiverName | params |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:18 | searchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:18 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:18 | searchParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:18 | searchParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:18 | searchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchP ... ing(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchP ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchP ... ing(1)) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchP ... ing(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchP ... ing(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchParams | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:7:20:61 | searchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | exceptional return of new URL ... ing(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | exceptional return of new URL ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | exceptional return of new URL ... ing(1)) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | exceptional return of new URL ... ing(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | exceptional return of new URL ... ing(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | new URL ... ing(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | new URL ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | new URL ... ing(1)) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | new URL ... ing(1)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:22:20:61 | new URL ... ing(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:26:20:40 | URLSearchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:26:20:40 | URLSearchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:26:20:40 | URLSearchParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:26:20:40 | URLSearchParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:26:20:40 | URLSearchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:47 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:47 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:47 | target | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:47 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:47 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:57 | target.substring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:57 | target.substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:57 | target.substring | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:57 | target.substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:57 | target.substring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | exceptional return of target.substring(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | exceptional return of target.substring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | exceptional return of target.substring(1) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | exceptional return of target.substring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | exceptional return of target.substring(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | CalleeFlexibleAccessPath | URLSearchParams |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:42:20:60 | target.substring(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:49:20:57 | substring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:49:20:57 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:49:20:57 | substring | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:49:20:57 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:49:20:57 | substring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | CalleeFlexibleAccessPath | target.substring |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:20:59:20:59 | 1 | receiverName | target |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:3 | $ | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | $('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | $('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | $('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | exceptional return of $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | exceptional return of $('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | exceptional return of $('name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | exceptional return of $('name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:11 | exceptional return of $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:16 | $('name').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:16 | $('name').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:16 | $('name').html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:16 | $('name').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:16 | $('name').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | $('name ... name')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | $('name ... name')) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | $('name ... name')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | exceptional return of $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | exceptional return of $('name ... name')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | exceptional return of $('name ... name')) | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | exceptional return of $('name ... name')) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:3:21:42 | exceptional return of $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:5:21:10 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:13:21:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:13:21:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:13:21:16 | html | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:13:21:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:13:21:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:29 | searchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:29 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:29 | searchParams | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:29 | searchParams | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:29 | searchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:33 | searchParams.get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:33 | searchParams.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:33 | searchParams.get | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:33 | searchParams.get | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:33 | searchParams.get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | exceptional return of searchP ... 'name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | exceptional return of searchP ... 'name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | exceptional return of searchP ... 'name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | exceptional return of searchP ... 'name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | exceptional return of searchP ... 'name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:18:21:41 | searchP ... 'name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:31:21:33 | get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:31:21:33 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:31:21:33 | get | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:31:21:33 | get | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:31:21:33 | get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | CalleeFlexibleAccessPath | searchParams.get |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | enclosingFunctionBody | target document location search $ myId html target document write <OPTION value=1> document location href substring document location href indexOf default= 8 </OPTION> document write <OPTION value=2>English</OPTION> $ <div style="width: target px"> $ <div style="width: target px"> $ <div style="width: parseInt target px"> params URL document location searchParams $ name html params get name searchParams URLSearchParams target substring 1 $ name html searchParams get name |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:21:35:21:40 | 'name' | receiverName | searchParams |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:24:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:24:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:24:0 | this | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:24:0 | this | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:24:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | 'arguments' object of function foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | 'arguments' object of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | 'arguments' object of function foo | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | 'arguments' object of function foo | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | 'arguments' object of function foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | exceptional return of function foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | exceptional return of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | exceptional return of function foo | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | exceptional return of function foo | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | exceptional return of function foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | functio ... get);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | functio ... get);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | functio ... get);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | return of function foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | return of function foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | return of function foo | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | return of function foo | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:1:27:1 | return of function foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:10:24:12 | foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:24:14:24:19 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:3 | $ | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:3 | $ | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:3 | $ | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | $('myId') | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | $('myId') | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | $('myId') | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | exceptional return of $('myId') | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | exceptional return of $('myId') | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:16 | $('myId').html | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:16 | $('myId').html | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:16 | $('myId').html | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | $('myId ... target) | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | $('myId ... target) | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | $('myId ... target) | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | exceptional return of $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | exceptional return of $('myId ... target) | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | exceptional return of $('myId ... target) | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:3:26:24 | exceptional return of $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:5:26:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:13:26:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:13:26:16 | html | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:13:26:16 | html | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:13:26:16 | html | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:13:26:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | contextSurroundingFunctionParameters | (target) |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | enclosingFunctionBody | target $ myId html target |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | enclosingFunctionName | foo |
| autogenerated/Xss/DomBasedXss/tst.js:26:18:26:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:3 | foo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:3 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:3 | foo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | exceptional return of foo(doc ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | exceptional return of foo(doc ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | exceptional return of foo(doc ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | foo(doc ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | foo(doc ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:1:28:29 | foo(doc ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:12 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:21 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:21 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:21 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:28 | documen ... .search | CalleeFlexibleAccessPath | foo |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:28 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:28 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:28 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:5:28:28 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:14:28:21 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:14:28:21 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:14:28:21 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:28:23:28:28 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:28:23:28:28 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:28:23:28:28 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:30:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:30:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:30:0 | this | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:30:0 | this | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:30:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | 'arguments' object of function bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | 'arguments' object of function bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | 'arguments' object of function bar | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | 'arguments' object of function bar | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | 'arguments' object of function bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | exceptional return of function bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | exceptional return of function bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | exceptional return of function bar | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | exceptional return of function bar | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | exceptional return of function bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | functio ... arch;\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | functio ... arch;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | functio ... arch;\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | return of function bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | return of function bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | return of function bar | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | return of function bar | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:30:1:32:1 | return of function bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:30:10:30:12 | bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:17 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:17 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:17 | document | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:17 | document | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:17 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:26 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:26 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:26 | document.location | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:26 | document.location | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:26 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:33 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:33 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:33 | documen ... .search | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:33 | documen ... .search | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:31:10:31:33 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:31:19:31:26 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:31:19:31:26 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:31:19:31:26 | location | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:31:19:31:26 | location | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:31:19:31:26 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:31:28:31:33 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:31:28:31:33 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:31:28:31:33 | search | enclosingFunctionBody | document location search |
| autogenerated/Xss/DomBasedXss/tst.js:31:28:31:33 | search | enclosingFunctionName | bar |
| autogenerated/Xss/DomBasedXss/tst.js:31:28:31:33 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | $('myId ... (bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | $('myId ... (bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | $('myId ... (bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | exceptional return of $('myId ... (bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | exceptional return of $('myId ... (bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:1:34:21 | exceptional return of $('myId ... (bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:3:34:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:34:3:34:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:34:3:34:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:3:34:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:3:34:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:11:34:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:11:34:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:11:34:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:18 | bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:18 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:18 | bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | bar() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | bar() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | exceptional return of bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | exceptional return of bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:34:16:34:20 | exceptional return of bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:36:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:36:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:36:0 | this | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:36:0 | this | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:36:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | 'arguments' object of function baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | 'arguments' object of function baz | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | 'arguments' object of function baz | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | 'arguments' object of function baz | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | 'arguments' object of function baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | exceptional return of function baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | exceptional return of function baz | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | exceptional return of function baz | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | exceptional return of function baz | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | exceptional return of function baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | functio ... rn x;\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | functio ... rn x;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | functio ... rn x;\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | return of function baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | return of function baz | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | return of function baz | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | return of function baz | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:1:38:1 | return of function baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:10:36:12 | baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:36:14:36:14 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:37:10:37:10 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:37:10:37:10 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:37:10:37:10 | x | enclosingFunctionBody | x x |
| autogenerated/Xss/DomBasedXss/tst.js:37:10:37:10 | x | enclosingFunctionName | baz |
| autogenerated/Xss/DomBasedXss/tst.js:37:10:37:10 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | exceptional return of $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | exceptional return of $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:1:40:45 | exceptional return of $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:3:40:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:40:3:40:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:40:3:40:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:3:40:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:3:40:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:11:40:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:11:40:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:11:40:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:18 | baz | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:18 | baz | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:18 | baz | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | baz(doc ... search) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | baz(doc ... search) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | baz(doc ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | baz(doc ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | baz(doc ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | exceptional return of baz(doc ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | exceptional return of baz(doc ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:16:40:44 | exceptional return of baz(doc ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:27 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:27 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:27 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:36 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:36 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:36 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:43 | documen ... .search | CalleeFlexibleAccessPath | baz |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:43 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:43 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:43 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:20:40:43 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:29:40:36 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:29:40:36 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:29:40:36 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:40:38:40:43 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:40:38:40:43 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:40:38:40:43 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:42:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:42:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:42:0 | this | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:42:0 | this | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:42:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | 'arguments' object of function wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | 'arguments' object of function wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | 'arguments' object of function wrap | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | 'arguments' object of function wrap | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | 'arguments' object of function wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | exceptional return of function wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | exceptional return of function wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | exceptional return of function wrap | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | exceptional return of function wrap | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | exceptional return of function wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | functio ... iv>";\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | functio ... iv>";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | functio ... iv>";\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | return of function wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | return of function wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | return of function wrap | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | return of function wrap | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:1:44:1 | return of function wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:10:42:13 | wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:42:15:42:15 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:16 | "<div>" | stringConcatenatedWith |  -endpoint- s + '</div>' |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:20 | "<div>" + s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:20 | "<div>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:20 | "<div>" + s | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:20 | "<div>" + s | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:20 | "<div>" + s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:31 | "<div>" ... </div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:31 | "<div>" ... </div>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:31 | "<div>" ... </div>" | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:31 | "<div>" ... </div>" | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:43:10:43:31 | "<div>" ... </div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:20:43:20 | s | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | enclosingFunctionBody | s <div> s </div> |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | enclosingFunctionName | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:43:24:43:31 | "</div>" | stringConcatenatedWith | '<div>' + s -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | exceptional return of $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | exceptional return of $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:1:46:46 | exceptional return of $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:3:46:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:46:3:46:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:46:3:46:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:3:46:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:3:46:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:11:46:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:11:46:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:11:46:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:19 | wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:19 | wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:19 | wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | exceptional return of wrap(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | exceptional return of wrap(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | exceptional return of wrap(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | wrap(do ... search) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | wrap(do ... search) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | wrap(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | wrap(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:16:46:45 | wrap(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:28 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:28 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:28 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:37 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:37 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:37 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:44 | documen ... .search | CalleeFlexibleAccessPath | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:44 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:44 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:44 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:21:46:44 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:30:46:37 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:30:46:37 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:30:46:37 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:46:39:46:44 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:46:39:46:44 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:46:39:46:44 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:48:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:48:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:48:0 | this | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:48:0 | this | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:48:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | 'arguments' object of function chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | 'arguments' object of function chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | 'arguments' object of function chop | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | 'arguments' object of function chop | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | 'arguments' object of function chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | exceptional return of function chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | exceptional return of function chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | exceptional return of function chop | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | exceptional return of function chop | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | exceptional return of function chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | functio ... n "";\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | functio ... n "";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | functio ... n "";\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | return of function chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | return of function chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | return of function chop | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | return of function chop | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:1:52:1 | return of function chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:10:48:13 | chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:48:15:48:15 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:49:7:49:7 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:12 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:12 | s | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:12 | s | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:12 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:19 | s.substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:19 | s.substr | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:19 | s.substr | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:19 | s.substr | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:19 | s.substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | exceptional return of s.substr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | exceptional return of s.substr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | exceptional return of s.substr(1) | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | exceptional return of s.substr(1) | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | exceptional return of s.substr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | s.substr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | s.substr(1) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | s.substr(1) | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | s.substr(1) | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:12:50:22 | s.substr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:14:50:19 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:14:50:19 | substr | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:14:50:19 | substr | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:14:50:19 | substr | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:14:50:19 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | CalleeFlexibleAccessPath | s.substr |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:50:21:50:21 | 1 | receiverName | s |
| autogenerated/Xss/DomBasedXss/tst.js:51:10:51:11 | "" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:51:10:51:11 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:51:10:51:11 | "" | enclosingFunctionBody | s s s substr 1  |
| autogenerated/Xss/DomBasedXss/tst.js:51:10:51:11 | "" | enclosingFunctionName | chop |
| autogenerated/Xss/DomBasedXss/tst.js:51:10:51:11 | "" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | exceptional return of $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | exceptional return of $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:1:54:46 | exceptional return of $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:3:54:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:54:3:54:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:54:3:54:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:3:54:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:3:54:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:11:54:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:11:54:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:11:54:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:19 | chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:19 | chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:19 | chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | chop(do ... search) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | chop(do ... search) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | chop(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | chop(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | chop(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | exceptional return of chop(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | exceptional return of chop(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:16:54:45 | exceptional return of chop(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:28 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:28 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:28 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:37 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:37 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:37 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:44 | documen ... .search | CalleeFlexibleAccessPath | chop |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:44 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:44 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:44 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:21:54:44 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:30:54:37 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:30:54:37 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:30:54:37 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:54:39:54:44 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:54:39:54:44 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:54:39:54:44 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | exceptional return of $('myId ... earch)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | exceptional return of $('myId ... earch)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:1:56:46 | exceptional return of $('myId ... earch)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:3:56:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:56:3:56:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:56:3:56:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:3:56:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:3:56:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:11:56:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:11:56:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:11:56:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:19 | chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:19 | chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:19 | chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | chop(do ... search) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | chop(do ... search) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | chop(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | chop(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | chop(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | exceptional return of chop(do ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | exceptional return of chop(do ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:16:56:45 | exceptional return of chop(do ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:28 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:28 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:28 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:37 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:37 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:37 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:44 | documen ... .search | CalleeFlexibleAccessPath | chop |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:44 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:44 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:44 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:21:56:44 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:30:56:37 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:30:56:37 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:30:56:37 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:56:39:56:44 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:56:39:56:44 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:56:39:56:44 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | $('myId ... ar()))) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | $('myId ... ar()))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | $('myId ... ar()))) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | exceptional return of $('myId ... ar()))) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | exceptional return of $('myId ... ar()))) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:1:58:33 | exceptional return of $('myId ... ar()))) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:3:58:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:58:3:58:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:58:3:58:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:3:58:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:3:58:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:11:58:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:11:58:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:11:58:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:19 | wrap | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:19 | wrap | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:19 | wrap | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | exceptional return of wrap(chop(bar())) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | exceptional return of wrap(chop(bar())) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | exceptional return of wrap(chop(bar())) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | wrap(chop(bar())) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | wrap(chop(bar())) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | wrap(chop(bar())) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | wrap(chop(bar())) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:16:58:32 | wrap(chop(bar())) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:24 | chop | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:24 | chop | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:24 | chop | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | chop(bar()) | CalleeFlexibleAccessPath | wrap |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | chop(bar()) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | chop(bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | chop(bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | chop(bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | exceptional return of chop(bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | exceptional return of chop(bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:21:58:31 | exceptional return of chop(bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:28 | bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:28 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:28 | bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | bar() | CalleeFlexibleAccessPath | chop |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | bar() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | exceptional return of bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | exceptional return of bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:58:26:58:30 | exceptional return of bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:60:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:60:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:60:0 | this | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:60:0 | this | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:60:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | 'arguments' object of function dangerouslySetInnerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | 'arguments' object of function dangerouslySetInnerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | 'arguments' object of function dangerouslySetInnerHtml | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | 'arguments' object of function dangerouslySetInnerHtml | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | 'arguments' object of function dangerouslySetInnerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | exceptional return of function dangerouslySetInnerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | exceptional return of function dangerouslySetInnerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | exceptional return of function dangerouslySetInnerHtml | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | exceptional return of function dangerouslySetInnerHtml | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | exceptional return of function dangerouslySetInnerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | functio ... l(s);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | functio ... l(s);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | functio ... l(s);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | return of function dangerouslySetInnerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | return of function dangerouslySetInnerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | return of function dangerouslySetInnerHtml | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | return of function dangerouslySetInnerHtml | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:1:63:1 | return of function dangerouslySetInnerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangero ... nerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangero ... nerHtml | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangero ... nerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangerouslySetInnerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangerouslySetInnerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:10:60:32 | dangerouslySetInnerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:60:34:60:34 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:3 | $ | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:3 | $ | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:3 | $ | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | $('myId') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | $('myId') | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | $('myId') | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | exceptional return of $('myId') | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | exceptional return of $('myId') | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:16 | $('myId').html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:16 | $('myId').html | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:16 | $('myId').html | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | $('myId').html(s) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | $('myId').html(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | $('myId').html(s) | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | $('myId').html(s) | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | $('myId').html(s) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | exceptional return of $('myId').html(s) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | exceptional return of $('myId').html(s) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | exceptional return of $('myId').html(s) | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | exceptional return of $('myId').html(s) | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:3:62:19 | exceptional return of $('myId').html(s) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:5:62:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:13:62:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:13:62:16 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:13:62:16 | html | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:13:62:16 | html | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:13:62:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | enclosingFunctionBody | s $ myId html s |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | enclosingFunctionName | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:62:18:62:18 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:23 | dangero ... nerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:23 | dangero ... nerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:23 | dangero ... nerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | dangero ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | dangero ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | dangero ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | exceptional return of dangero ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | exceptional return of dangero ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:1:64:49 | exceptional return of dangero ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:32 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:32 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:32 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:41 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:41 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:41 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:48 | documen ... .search | CalleeFlexibleAccessPath | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:48 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:48 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:48 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:25:64:48 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:34:64:41 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:34:64:41 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:34:64:41 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:64:43:64:48 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:64:43:64:48 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:64:43:64:48 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:23 | dangero ... nerHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:23 | dangero ... nerHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:23 | dangero ... nerHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | dangero ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | dangero ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | dangero ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | exceptional return of dangero ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | exceptional return of dangero ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:1:65:49 | exceptional return of dangero ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:32 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:32 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:32 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:41 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:41 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:41 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:48 | documen ... .search | CalleeFlexibleAccessPath | dangerouslySetInnerHtml |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:48 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:48 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:48 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:25:65:48 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:34:65:41 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:34:65:41 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:34:65:41 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:65:43:65:48 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:65:43:65:48 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:65:43:65:48 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:1 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:1 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:9 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:14 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:14 | $('myId').html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:14 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | $('myId ... (bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | $('myId ... (bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | $('myId ... (bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | exceptional return of $('myId ... (bar()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | exceptional return of $('myId ... (bar()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:1:68:21 | exceptional return of $('myId ... (bar()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:3:68:8 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:68:3:68:8 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:68:3:68:8 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:3:68:8 | 'myId' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:3:68:8 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:11:68:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:11:68:14 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:11:68:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:18 | bar | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:18 | bar | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:18 | bar | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | bar() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | bar() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | exceptional return of bar() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | exceptional return of bar() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:68:16:68:20 | exceptional return of bar() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:27 | [,docum ... search] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:27 | [,docum ... search] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:27 | [,docum ... search] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:35 | [,docum ... forEach | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:35 | [,docum ... forEach | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:70:35 | [,docum ... forEach | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | [,docum ... (x);\\n}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | [,docum ... (x);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | [,docum ... (x);\\n}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | exceptional return of [,docum ... (x);\\n}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | exceptional return of [,docum ... (x);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:1:74:2 | exceptional return of [,docum ... (x);\\n}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:10 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:19 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:19 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:19 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:3:70:26 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:12:70:19 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:12:70:19 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:12:70:19 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:21:70:26 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:21:70:26 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:21:70:26 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:29:70:35 | forEach | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:29:70:35 | forEach | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:29:70:35 | forEach | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:70:36 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:70:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:70:36 | this | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:70:36 | this | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:70:36 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | 'arguments' object of anonymous function | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | exceptional return of anonymous function | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | exceptional return of anonymous function | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | functio ... l(x);\\n} | CalleeFlexibleAccessPath | ?.forEach |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | functio ... l(x);\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | functio ... l(x);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | functio ... l(x);\\n} | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | functio ... l(x);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | return of anonymous function | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | return of anonymous function | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:37:74:1 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:70:46:70:46 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:71:7:71:7 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:5 | $ | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:5 | $ | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | $('myId') | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | $('myId') | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | $('myId') | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | exceptional return of $('myId') | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | exceptional return of $('myId') | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:13 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:18 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:18 | $('myId').html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:18 | $('myId').html | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:18 | $('myId').html | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:18 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | $('myId').html(x) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | $('myId').html(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | $('myId').html(x) | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | $('myId').html(x) | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | $('myId').html(x) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | exceptional return of $('myId').html(x) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | exceptional return of $('myId').html(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | exceptional return of $('myId').html(x) | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | exceptional return of $('myId').html(x) | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:5:73:21 | exceptional return of $('myId').html(x) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:7:73:12 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:15:73:18 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:15:73:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:15:73:18 | html | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:15:73:18 | html | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:15:73:18 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | enclosingFunctionBody | x x $ myId html x |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | enclosingFunctionName | forEach#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:73:20:73:20 | x | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:5 | s | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:5 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:5 | s | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:76 | s = <sp ... rch}}/> | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:76 | s = <sp ... rch}}/> | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:5:77:76 | s = <sp ... rch}}/> | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:9:77:76 | <span d ... rch}}/> | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:9:77:76 | <span d ... rch}}/> | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:9:77:76 | <span d ... rch}}/> | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:10:77:13 | span | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:10:77:13 | span | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:10:77:13 | span | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:37 | dangero ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:37 | dangero ... nerHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:37 | dangero ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:15:77:74 | dangero ... earch}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:40:77:73 | {__html ... search} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:77:40:77:73 | {__html ... search} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:40:77:73 | {__html ... search} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:40:77:73 | {__html ... search} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:46 | __html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:46 | __html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:46 | __html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:41:77:72 | __html: ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:56 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:56 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:56 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:65 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:65 | document.location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:65 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:72 | documen ... .search | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:72 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:72 | documen ... .search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:49:77:72 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:58:77:65 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:58:77:65 | location | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:58:77:65 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:77:67:77:72 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:77:67:77:72 | search | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:77:67:77:72 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:7 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:7 | angular | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:7 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:14 | angular.module | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:14 | angular.module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:14 | angular.module | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | angular ... p', []) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | angular ... p', []) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | angular ... p', []) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | exceptional return of angular ... p', []) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | exceptional return of angular ... p', []) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:79:27 | exceptional return of angular ... p', []) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:80:12 | angular ... service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:80:12 | angular ... service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:80:12 | angular ... service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:88:6 | exceptional return of angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:89:12 | angular ... service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:89:12 | angular ... service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:89:12 | angular ... service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:92:6 | exceptional return of angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:93:14 | angular ... rective | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:93:14 | angular ... rective | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:93:14 | angular ... rective | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:100:6 | exceptional return of angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:101:12 | angular ... service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:101:12 | angular ... service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:101:12 | angular ... service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | exceptional return of angular ... \\n    }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | exceptional return of angular ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:1:104:6 | exceptional return of angular ... \\n    }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:9:79:14 | module | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:9:79:14 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:9:79:14 | module | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | CalleeFlexibleAccessPath | angular.module |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:16:79:22 | 'myApp' | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | CalleeFlexibleAccessPath | angular.module |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:79:25:79:26 | [] | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:80:6:80:12 | service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:6:80:12 | service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:6:80:12 | service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:14:80:24 | "myService" | CalleeFlexibleAccessPath | angular.module().service |
| autogenerated/Xss/DomBasedXss/tst.js:80:14:80:24 | "myService" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:80:14:80:24 | "myService" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:14:80:24 | "myService" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:14:80:24 | "myService" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:80:26 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:80:26 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:80:26 | this | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:80:26 | this | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:80:26 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | 'arguments' object of anonymous function | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | 'arguments' object of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | exceptional return of anonymous function | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | exceptional return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | angular.module().service |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | functio ... K\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | functio ... K\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | return of anonymous function | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:27:88:5 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:36:80:39 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:80:42:80:47 | $other | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:24 | $sce.trustAsHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:24 | $sce.trustAsHtml | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:24 | $sce.trustAsHtml | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:24 | $sce.trustAsHtml | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:24 | $sce.trustAsHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:9:81:50 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:14:81:24 | trustAsHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:14:81:24 | trustAsHtml | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:14:81:24 | trustAsHtml | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:14:81:24 | trustAsHtml | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:14:81:24 | trustAsHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:33 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:33 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:33 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:33 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:33 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:42 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:42 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:42 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:42 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:42 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAsHtml |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:26:81:49 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:81:35:81:42 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:35:81:42 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:35:81:42 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:35:81:42 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:35:81:42 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:81:44:81:49 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:81:44:81:49 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:81:44:81:49 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:81:44:81:49 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:81:44:81:49 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:23 | $sce.trustAsCss | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:23 | $sce.trustAsCss | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:23 | $sce.trustAsCss | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:23 | $sce.trustAsCss | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:23 | $sce.trustAsCss | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:9:82:49 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:14:82:23 | trustAsCss | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:14:82:23 | trustAsCss | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:14:82:23 | trustAsCss | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:14:82:23 | trustAsCss | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:14:82:23 | trustAsCss | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:32 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:32 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:32 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:32 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:32 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:41 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:41 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:41 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:41 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:41 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAsCss |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:25:82:48 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:82:34:82:41 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:34:82:41 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:34:82:41 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:34:82:41 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:34:82:41 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:82:43:82:48 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:82:43:82:48 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:82:43:82:48 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:82:43:82:48 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:82:43:82:48 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:27 | $sce.trustAsUNKNOWN | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:27 | $sce.trustAsUNKNOWN | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:27 | $sce.trustAsUNKNOWN | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:27 | $sce.trustAsUNKNOWN | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:27 | $sce.trustAsUNKNOWN | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:9:83:53 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:14:83:27 | trustAsUNKNOWN | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:14:83:27 | trustAsUNKNOWN | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:14:83:27 | trustAsUNKNOWN | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:14:83:27 | trustAsUNKNOWN | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:14:83:27 | trustAsUNKNOWN | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:36 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:36 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:36 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:36 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:36 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:45 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:45 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:45 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:45 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:45 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAsUNKNOWN |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:29:83:52 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:83:38:83:45 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:38:83:45 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:38:83:45 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:38:83:45 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:38:83:45 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:83:47:83:52 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:83:47:83:52 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:83:47:83:52 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:83:47:83:52 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:83:47:83:52 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:20 | $sce.trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:20 | $sce.trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:20 | $sce.trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:20 | $sce.trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:20 | $sce.trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:9:84:57 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:14:84:20 | trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:14:84:20 | trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:14:84:20 | trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:14:84:20 | trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:14:84:20 | trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:25 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:25 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:25 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:25 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:25 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:22:84:30 | $sce.HTML | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:84:27:84:30 | HTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:27:84:30 | HTML | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:27:84:30 | HTML | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:27:84:30 | HTML | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:27:84:30 | HTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:40 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:40 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:40 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:40 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:40 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:49 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:49 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:49 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:49 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:49 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:33:84:56 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:84:42:84:49 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:42:84:49 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:42:84:49 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:42:84:49 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:42:84:49 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:84:51:84:56 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:84:51:84:56 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:84:51:84:56 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:84:51:84:56 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:84:51:84:56 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:20 | $sce.trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:20 | $sce.trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:20 | $sce.trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:20 | $sce.trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:20 | $sce.trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:9:85:56 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:14:85:20 | trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:14:85:20 | trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:14:85:20 | trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:14:85:20 | trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:14:85:20 | trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:25 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:25 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:25 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:25 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:25 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:22:85:29 | $sce.CSS | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:85:27:85:29 | CSS | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:27:85:29 | CSS | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:27:85:29 | CSS | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:27:85:29 | CSS | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:27:85:29 | CSS | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:39 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:39 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:39 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:39 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:39 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:48 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:48 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:48 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:48 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:48 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:32:85:55 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:85:41:85:48 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:41:85:48 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:41:85:48 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:41:85:48 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:41:85:48 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:85:50:85:55 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:85:50:85:55 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:85:50:85:55 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:85:50:85:55 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:85:50:85:55 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:12 | $sce | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:12 | $sce | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:12 | $sce | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:12 | $sce | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:12 | $sce | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:20 | $sce.trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:20 | $sce.trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:20 | $sce.trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:20 | $sce.trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:20 | $sce.trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | $sce.tr ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | exceptional return of $sce.tr ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | exceptional return of $sce.tr ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | exceptional return of $sce.tr ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | exceptional return of $sce.tr ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:9:86:55 | exceptional return of $sce.tr ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:14:86:20 | trustAs | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:14:86:20 | trustAs | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:14:86:20 | trustAs | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:14:86:20 | trustAs | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:14:86:20 | trustAs | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:22:86:28 | UNKNOWN | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:38 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:38 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:38 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:38 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:38 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:47 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:47 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:47 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:47 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:47 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | CalleeFlexibleAccessPath | $sce.trustAs |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:31:86:54 | documen ... .search | receiverName | $sce |
| autogenerated/Xss/DomBasedXss/tst.js:86:40:86:47 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:40:86:47 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:40:86:47 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:40:86:47 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:40:86:47 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:86:49:86:54 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:86:49:86:54 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:86:49:86:54 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:86:49:86:54 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:86:49:86:54 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:14 | $other | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:14 | $other | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:14 | $other | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:14 | $other | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:14 | $other | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:26 | $other.trustAsHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:26 | $other.trustAsHtml | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:26 | $other.trustAsHtml | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:26 | $other.trustAsHtml | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:26 | $other.trustAsHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | $other. ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | $other. ... search) | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | $other. ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | $other. ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | $other. ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | exceptional return of $other. ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | exceptional return of $other. ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | exceptional return of $other. ... search) | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | exceptional return of $other. ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:9:87:52 | exceptional return of $other. ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:16:87:26 | trustAsHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:16:87:26 | trustAsHtml | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:16:87:26 | trustAsHtml | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:16:87:26 | trustAsHtml | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:16:87:26 | trustAsHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:35 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:35 | document | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:35 | document | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:35 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:35 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:44 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:44 | document.location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:44 | document.location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:44 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:44 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | CalleeFlexibleAccessPath | $other.trustAsHtml |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:28:87:51 | documen ... .search | receiverName | $other |
| autogenerated/Xss/DomBasedXss/tst.js:87:37:87:44 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:37:87:44 | location | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:37:87:44 | location | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:37:87:44 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:37:87:44 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:87:46:87:51 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:87:46:87:51 | search | contextSurroundingFunctionParameters | ($sce, $other) |
| autogenerated/Xss/DomBasedXss/tst.js:87:46:87:51 | search | enclosingFunctionBody | $sce $other $sce trustAsHtml document location search $sce trustAsCss document location search $sce trustAsUNKNOWN document location search $sce trustAs $sce HTML document location search $sce trustAs $sce CSS document location search $sce trustAs UNKNOWN document location search $other trustAsHtml document location search |
| autogenerated/Xss/DomBasedXss/tst.js:87:46:87:51 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:87:46:87:51 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:6:89:12 | service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:6:89:12 | service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:6:89:12 | service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:14:89:25 | "myService2" | CalleeFlexibleAccessPath | angular.module().service().service |
| autogenerated/Xss/DomBasedXss/tst.js:89:14:89:25 | "myService2" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:89:14:89:25 | "myService2" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:14:89:25 | "myService2" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:14:89:25 | "myService2" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:89:27 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:89:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:89:27 | this | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:89:27 | this | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:89:27 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | 'arguments' object of anonymous function | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | 'arguments' object of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | exceptional return of anonymous function | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | exceptional return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | angular.module().service().service |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | functio ... K\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | functio ... K\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | return of anonymous function | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:89:28:92:5 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:15 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:15 | angular | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:15 | angular | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:15 | angular | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:15 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:23 | angular.element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:23 | angular.element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:23 | angular.element | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:23 | angular.element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:23 | angular.element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | angular ... <div>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | angular ... <div>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | angular ... <div>') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | angular ... <div>') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | angular ... <div>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | exceptional return of angular ... <div>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | exceptional return of angular ... <div>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | exceptional return of angular ... <div>') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | exceptional return of angular ... <div>') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:32 | exceptional return of angular ... <div>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:37 | angular ... ').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:37 | angular ... ').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:37 | angular ... ').html | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:37 | angular ... ').html | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:37 | angular ... ').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | angular ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | angular ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | angular ... search) | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | angular ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | angular ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | exceptional return of angular ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | exceptional return of angular ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | exceptional return of angular ... search) | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | exceptional return of angular ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:9:90:63 | exceptional return of angular ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:17:90:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:17:90:23 | element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:17:90:23 | element | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:17:90:23 | element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:17:90:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | CalleeFlexibleAccessPath | angular.element |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:25:90:31 | '<div>' | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:90:34:90:37 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:34:90:37 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:34:90:37 | html | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:34:90:37 | html | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:34:90:37 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:46 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:46 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:46 | document | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:46 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:46 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:55 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:55 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:55 | document.location | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:55 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:55 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | CalleeFlexibleAccessPath | angular.element().html |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:39:90:62 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:48:90:55 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:48:90:55 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:48:90:55 | location | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:48:90:55 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:48:90:55 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:90:57:90:62 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:90:57:90:62 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:90:57:90:62 | search | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:90:57:90:62 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:90:57:90:62 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:15 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:15 | angular | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:15 | angular | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:15 | angular | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:15 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:23 | angular.element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:23 | angular.element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:23 | angular.element | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:23 | angular.element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:23 | angular.element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | angular ... <div>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | angular ... <div>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | angular ... <div>') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | angular ... <div>') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | angular ... <div>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | exceptional return of angular ... <div>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | exceptional return of angular ... <div>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | exceptional return of angular ... <div>') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | exceptional return of angular ... <div>') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:32 | exceptional return of angular ... <div>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:37 | angular ... ').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:37 | angular ... ').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:37 | angular ... ').html | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:37 | angular ... ').html | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:37 | angular ... ').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | angular ... 'SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | angular ... 'SAFE') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | angular ... 'SAFE') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | angular ... 'SAFE') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | angular ... 'SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | exceptional return of angular ... 'SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | exceptional return of angular ... 'SAFE') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | exceptional return of angular ... 'SAFE') | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | exceptional return of angular ... 'SAFE') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:9:91:45 | exceptional return of angular ... 'SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:17:91:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:17:91:23 | element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:17:91:23 | element | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:17:91:23 | element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:17:91:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | CalleeFlexibleAccessPath | angular.element |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:25:91:31 | '<div>' | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:91:34:91:37 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:34:91:37 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:34:91:37 | html | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:34:91:37 | html | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:34:91:37 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | CalleeFlexibleAccessPath | angular.element().html |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | enclosingFunctionBody | angular element <div> html document location search angular element <div> html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:91:39:91:44 | 'SAFE' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:6:93:14 | directive | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:6:93:14 | directive | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:6:93:14 | directive | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:16:93:27 | 'myCustomer' | CalleeFlexibleAccessPath | angular.module().service().service().directive |
| autogenerated/Xss/DomBasedXss/tst.js:93:16:93:27 | 'myCustomer' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:93:16:93:27 | 'myCustomer' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:16:93:27 | 'myCustomer' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:16:93:27 | 'myCustomer' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:93:29 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:93:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:93:29 | this | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:93:29 | this | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:93:29 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | 'arguments' object of anonymous function | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | 'arguments' object of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | exceptional return of anonymous function | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | exceptional return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | angular.module().service().service().directive |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | functio ... ;\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | functio ... ;\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | functio ... ;\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | return of anonymous function | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | return of anonymous function | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:93:30:100:5 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:94:16:99:9 | {\\n      ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:94:16:99:9 | {\\n      ...       } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:94:16:99:9 | {\\n      ...       } | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:94:16:99:9 | {\\n      ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:94:16:99:9 | {\\n      ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:95:16 | link | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:95:16 | link | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:95:16 | link | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:95:16 | link | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:95:16 | link | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:13:98:13 | link: f ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:95:18 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:95:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:95:18 | this | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:95:18 | this | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:95:18 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | 'arguments' object of method link | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | 'arguments' object of method link | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | 'arguments' object of method link | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | 'arguments' object of method link | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | 'arguments' object of method link | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | exceptional return of method link | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | exceptional return of method link | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | exceptional return of method link | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | exceptional return of method link | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | exceptional return of method link | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | assignedToPropName | link |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | return of method link | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | return of method link | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | return of method link | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | return of method link | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:19:98:13 | return of method link | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:28:95:32 | scope | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:28:95:32 | scope | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:95:28:95:32 | scope | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:28:95:32 | scope | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:28:95:32 | scope | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:95:35:95:41 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:23 | element | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:23 | element | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:23 | element | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:28 | element.html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:28 | element.html | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:28 | element.html | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:28 | element.html | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:28 | element.html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | element ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | element ... search) | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | element ... search) | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | element ... search) | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | element ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | exceptional return of element ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | exceptional return of element ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | exceptional return of element ... search) | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | exceptional return of element ... search) | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:17:96:54 | exceptional return of element ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:25:96:28 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:25:96:28 | html | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:25:96:28 | html | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:25:96:28 | html | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:25:96:28 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:37 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:37 | document | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:37 | document | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:37 | document | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:37 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:46 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:46 | document.location | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:46 | document.location | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:46 | document.location | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:46 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | CalleeFlexibleAccessPath | element.html |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:30:96:53 | documen ... .search | receiverName | element |
| autogenerated/Xss/DomBasedXss/tst.js:96:39:96:46 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:39:96:46 | location | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:39:96:46 | location | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:39:96:46 | location | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:39:96:46 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:96:48:96:53 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:96:48:96:53 | search | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:96:48:96:53 | search | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:96:48:96:53 | search | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:96:48:96:53 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:23 | element | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:23 | element | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:23 | element | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:28 | element.html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:28 | element.html | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:28 | element.html | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:28 | element.html | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:28 | element.html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | element.html('SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | element.html('SAFE') | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | element.html('SAFE') | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | element.html('SAFE') | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | element.html('SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | exceptional return of element.html('SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | exceptional return of element.html('SAFE') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | exceptional return of element.html('SAFE') | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | exceptional return of element.html('SAFE') | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:17:97:36 | exceptional return of element.html('SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:25:97:28 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:25:97:28 | html | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:97:25:97:28 | html | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:25:97:28 | html | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:25:97:28 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | CalleeFlexibleAccessPath | element.html |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | contextSurroundingFunctionParameters | ()\n(scope, element) |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | enclosingFunctionBody | link scope element element html document location search element html SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | enclosingFunctionName | directive#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:97:30:97:35 | 'SAFE' | receiverName | element |
| autogenerated/Xss/DomBasedXss/tst.js:101:6:101:12 | service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:6:101:12 | service | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:6:101:12 | service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:14:101:25 | "myService3" | CalleeFlexibleAccessPath | angular.module().service().service().directive().service |
| autogenerated/Xss/DomBasedXss/tst.js:101:14:101:25 | "myService3" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:101:14:101:25 | "myService3" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:14:101:25 | "myService3" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:14:101:25 | "myService3" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:101:27 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:101:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:101:27 | this | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:101:27 | this | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:101:27 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | 'arguments' object of anonymous function | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | 'arguments' object of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | exceptional return of anonymous function | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | exceptional return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | angular.module().service().service().directive().service |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | functio ... K\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | functio ... K\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | return of anonymous function | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | return of anonymous function | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:101:28:104:5 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:15 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:15 | angular | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:15 | angular | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:15 | angular | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:15 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:23 | angular.element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:23 | angular.element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:23 | angular.element | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:23 | angular.element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:23 | angular.element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | angular ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | angular ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | angular ... search) | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | angular ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | angular ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | exceptional return of angular ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | exceptional return of angular ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | exceptional return of angular ... search) | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | exceptional return of angular ... search) | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:9:102:49 | exceptional return of angular ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:17:102:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:17:102:23 | element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:17:102:23 | element | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:17:102:23 | element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:17:102:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:32 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:32 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:32 | document | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:32 | document | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:32 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:41 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:41 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:41 | document.location | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:41 | document.location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:41 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | CalleeFlexibleAccessPath | angular.element |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:25:102:48 | documen ... .search | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:102:34:102:41 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:34:102:41 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:34:102:41 | location | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:34:102:41 | location | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:34:102:41 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:102:43:102:48 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:102:43:102:48 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:102:43:102:48 | search | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:102:43:102:48 | search | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:102:43:102:48 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:15 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:15 | angular | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:15 | angular | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:15 | angular | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:15 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:23 | angular.element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:23 | angular.element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:23 | angular.element | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:23 | angular.element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:23 | angular.element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | angular ... 'SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | angular ... 'SAFE') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | angular ... 'SAFE') | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | angular ... 'SAFE') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | angular ... 'SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | exceptional return of angular ... 'SAFE') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | exceptional return of angular ... 'SAFE') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | exceptional return of angular ... 'SAFE') | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | exceptional return of angular ... 'SAFE') | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:9:103:31 | exceptional return of angular ... 'SAFE') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:17:103:23 | element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:17:103:23 | element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:103:17:103:23 | element | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:17:103:23 | element | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:17:103:23 | element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | CalleeFlexibleAccessPath | angular.element |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | enclosingFunctionBody | angular element document location search angular element SAFE |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | enclosingFunctionName | service#functionalargument |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:103:25:103:30 | 'SAFE' | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:106:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:106:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:106:0 | this | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:106:0 | this | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:106:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | 'arguments' object of function tst | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | 'arguments' object of function tst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | 'arguments' object of function tst | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | 'arguments' object of function tst | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | 'arguments' object of function tst | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | exceptional return of function tst | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | exceptional return of function tst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | exceptional return of function tst | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | exceptional return of function tst | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | exceptional return of function tst | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | functio ... e(v);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | functio ... e(v);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | functio ... e(v);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | return of function tst | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | return of function tst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | return of function tst | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | return of function tst | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:106:1:143:1 | return of function tst | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:106:10:106:12 | tst | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:106:10:106:12 | tst | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:106:10:106:12 | tst | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:7 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:7 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:7 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:7 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:7 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v = doc ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v = doc ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v = doc ... bstr(1) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v = doc ... bstr(1) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:7:107:44 | v = doc ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:18 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:18 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:18 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:18 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:18 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:27 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:27 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:27 | document.location | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:27 | document.location | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:27 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:34 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:34 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:34 | documen ... .search | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:34 | documen ... .search | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:34 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:41 | documen ... .substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:41 | documen ... .substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:41 | documen ... .substr | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:41 | documen ... .substr | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:41 | documen ... .substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | documen ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | documen ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | documen ... bstr(1) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | documen ... bstr(1) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | documen ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | exceptional return of documen ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | exceptional return of documen ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | exceptional return of documen ... bstr(1) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | exceptional return of documen ... bstr(1) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:11:107:44 | exceptional return of documen ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:20:107:27 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:20:107:27 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:20:107:27 | location | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:20:107:27 | location | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:20:107:27 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:29:107:34 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:29:107:34 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:29:107:34 | search | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:29:107:34 | search | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:29:107:34 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:36:107:41 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:36:107:41 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:36:107:41 | substr | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:36:107:41 | substr | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:36:107:41 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | CalleeFlexibleAccessPath | document.location.search.substr |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:107:43:107:43 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:10 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:10 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:16 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:16 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:3:110:19 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:12:110:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:12:110:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:110:12:110:16 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:12:110:16 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:12:110:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:110:18:110:18 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:13 | /^\\d+$/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:13 | /^\\d+$/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:13 | /^\\d+$/ | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:13 | /^\\d+$/ | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:13 | /^\\d+$/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:18 | /^\\d+$/.test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:18 | /^\\d+$/.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:18 | /^\\d+$/.test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:18 | /^\\d+$/.test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:18 | /^\\d+$/.test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | /^\\d+$/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | /^\\d+$/.test(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | /^\\d+$/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | /^\\d+$/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | /^\\d+$/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | exceptional return of /^\\d+$/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | exceptional return of /^\\d+$/.test(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | exceptional return of /^\\d+$/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | exceptional return of /^\\d+$/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:7:112:21 | exceptional return of /^\\d+$/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:112:15:112:18 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:15:112:18 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:112:15:112:18 | test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:15:112:18 | test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:15:112:18 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:112:20:112:20 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:12 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:12 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:18 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:18 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:18 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:18 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:18 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:5:114:21 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:14:114:18 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:14:114:18 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:114:14:114:18 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:14:114:18 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:14:114:18 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:114:20:114:20 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:117:7:117:27 | (m = /^ ... xec(v)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:7:117:27 | (m = /^ ... xec(v)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:7:117:27 | (m = /^ ... xec(v)) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:7:117:27 | (m = /^ ... xec(v)) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:7:117:27 | (m = /^ ... xec(v)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:8 | m | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:8 | m | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:8 | m | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:8 | m | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:8 | m | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:26 | m = /^\\d+$/.exec(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:26 | m = /^\\d+$/.exec(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:26 | m = /^\\d+$/.exec(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:26 | m = /^\\d+$/.exec(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:8:117:26 | m = /^\\d+$/.exec(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:18 | /^\\d+$/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:18 | /^\\d+$/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:18 | /^\\d+$/ | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:18 | /^\\d+$/ | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:18 | /^\\d+$/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:23 | /^\\d+$/.exec | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:23 | /^\\d+$/.exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:23 | /^\\d+$/.exec | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:23 | /^\\d+$/.exec | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:23 | /^\\d+$/.exec | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | /^\\d+$/.exec(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | /^\\d+$/.exec(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | /^\\d+$/.exec(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | /^\\d+$/.exec(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | /^\\d+$/.exec(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | exceptional return of /^\\d+$/.exec(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | exceptional return of /^\\d+$/.exec(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | exceptional return of /^\\d+$/.exec(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | exceptional return of /^\\d+$/.exec(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:12:117:26 | exceptional return of /^\\d+$/.exec(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:20:117:23 | exec | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:20:117:23 | exec | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:20:117:23 | exec | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:20:117:23 | exec | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:20:117:23 | exec | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | CalleeFlexibleAccessPath | ?.exec |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:117:25:117:25 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:12 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:12 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:18 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:18 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:18 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:18 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:18 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:5:119:21 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:14:119:18 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:14:119:18 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:119:14:119:18 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:14:119:18 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:14:119:18 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:119:20:119:20 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:7 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:7 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:7 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:7 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:7 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:13 | v.match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:13 | v.match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:13 | v.match | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:13 | v.match | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:13 | v.match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | exceptional return of v.match(/^\\d+$/) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | exceptional return of v.match(/^\\d+$/) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | exceptional return of v.match(/^\\d+$/) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | exceptional return of v.match(/^\\d+$/) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | exceptional return of v.match(/^\\d+$/) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | v.match(/^\\d+$/) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | v.match(/^\\d+$/) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | v.match(/^\\d+$/) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | v.match(/^\\d+$/) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:7:122:22 | v.match(/^\\d+$/) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:9:122:13 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:9:122:13 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:122:9:122:13 | match | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:9:122:13 | match | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:9:122:13 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | CalleeFlexibleAccessPath | v.match |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:122:15:122:21 | /^\\d+$/ | receiverName | v |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:14 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:14 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:14 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:14 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:14 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:20 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:20 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:20 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:20 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:20 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:7:124:23 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:16:124:20 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:16:124:20 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:124:16:124:20 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:16:124:20 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:16:124:20 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:124:22:124:22 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:7 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:7 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:7 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:7 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:7 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:13 | v.match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:13 | v.match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:13 | v.match | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:13 | v.match | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:13 | v.match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | exceptional return of v.match("^\\\\d+$") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | exceptional return of v.match("^\\\\d+$") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | exceptional return of v.match("^\\\\d+$") | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | exceptional return of v.match("^\\\\d+$") | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | exceptional return of v.match("^\\\\d+$") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | v.match("^\\\\d+$") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | v.match("^\\\\d+$") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | v.match("^\\\\d+$") | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | v.match("^\\\\d+$") | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:7:127:23 | v.match("^\\\\d+$") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:9:127:13 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:9:127:13 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:127:9:127:13 | match | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:9:127:13 | match | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:9:127:13 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | CalleeFlexibleAccessPath | v.match |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:127:15:127:22 | "^\\\\d+$" | receiverName | v |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:14 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:14 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:14 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:14 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:14 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:20 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:20 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:20 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:20 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:20 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:7:129:23 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:16:129:20 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:16:129:20 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:129:16:129:20 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:16:129:20 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:16:129:20 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:129:22:129:22 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:132:7:132:22 | !(/\\d+/.test(v)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:7:132:22 | !(/\\d+/.test(v)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:7:132:22 | !(/\\d+/.test(v)) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:7:132:22 | !(/\\d+/.test(v)) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:7:132:22 | !(/\\d+/.test(v)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:8:132:22 | (/\\d+/.test(v)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:8:132:22 | (/\\d+/.test(v)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:8:132:22 | (/\\d+/.test(v)) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:8:132:22 | (/\\d+/.test(v)) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:8:132:22 | (/\\d+/.test(v)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:13 | /\\d+/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:13 | /\\d+/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:13 | /\\d+/ | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:13 | /\\d+/ | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:13 | /\\d+/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:18 | /\\d+/.test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:18 | /\\d+/.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:18 | /\\d+/.test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:18 | /\\d+/.test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:18 | /\\d+/.test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | /\\d+/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | /\\d+/.test(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | /\\d+/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | /\\d+/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | /\\d+/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | exceptional return of /\\d+/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | exceptional return of /\\d+/.test(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | exceptional return of /\\d+/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | exceptional return of /\\d+/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:9:132:21 | exceptional return of /\\d+/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:15:132:18 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:15:132:18 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:15:132:18 | test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:15:132:18 | test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:15:132:18 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:132:20:132:20 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:10 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:10 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:16 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:16 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:3:136:19 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:12:136:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:12:136:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:136:12:136:16 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:12:136:16 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:12:136:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:136:18:136:18 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:138:7:138:24 | !(/^\\d+$/.test(v)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:7:138:24 | !(/^\\d+$/.test(v)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:7:138:24 | !(/^\\d+$/.test(v)) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:7:138:24 | !(/^\\d+$/.test(v)) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:7:138:24 | !(/^\\d+$/.test(v)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:8:138:24 | (/^\\d+$/.test(v)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:8:138:24 | (/^\\d+$/.test(v)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:8:138:24 | (/^\\d+$/.test(v)) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:8:138:24 | (/^\\d+$/.test(v)) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:8:138:24 | (/^\\d+$/.test(v)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:15 | /^\\d+$/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:15 | /^\\d+$/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:15 | /^\\d+$/ | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:15 | /^\\d+$/ | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:15 | /^\\d+$/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:20 | /^\\d+$/.test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:20 | /^\\d+$/.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:20 | /^\\d+$/.test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:20 | /^\\d+$/.test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:20 | /^\\d+$/.test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | /^\\d+$/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | /^\\d+$/.test(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | /^\\d+$/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | /^\\d+$/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | /^\\d+$/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | exceptional return of /^\\d+$/.test(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | exceptional return of /^\\d+$/.test(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | exceptional return of /^\\d+$/.test(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | exceptional return of /^\\d+$/.test(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:9:138:23 | exceptional return of /^\\d+$/.test(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:17:138:20 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:17:138:20 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:17:138:20 | test | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:17:138:20 | test | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:17:138:20 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:138:22:138:22 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:10 | document | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:10 | document | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:16 | document.write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:16 | document.write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | document.write(v) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | exceptional return of document.write(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | exceptional return of document.write(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | exceptional return of document.write(v) | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | exceptional return of document.write(v) | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:3:142:19 | exceptional return of document.write(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:12:142:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:12:142:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:142:12:142:16 | write | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:12:142:16 | write | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:12:142:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | enclosingFunctionBody | v document location search substr 1 document write v /^\\d+$/ test v document write v m /^\\d+$/ exec v document write v v match /^\\d+$/ document write v v match ^\\d+$ document write v /\\d+/ test v document write v /^\\d+$/ test v document write v |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | enclosingFunctionName | tst |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:142:18:142:18 | v | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:145:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:145:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:145:0 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:145:0 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:145:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | 'arguments' object of function angularJSServices | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | 'arguments' object of function angularJSServices | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | 'arguments' object of function angularJSServices | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | 'arguments' object of function angularJSServices | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | 'arguments' object of function angularJSServices | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | exceptional return of function angularJSServices | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | exceptional return of function angularJSServices | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | exceptional return of function angularJSServices | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | exceptional return of function angularJSServices | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | exceptional return of function angularJSServices | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | functio ...    })\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | functio ...    })\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | functio ...    })\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | return of function angularJSServices | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | return of function angularJSServices | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | return of function angularJSServices | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | return of function angularJSServices | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:145:1:174:1 | return of function angularJSServices | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:145:10:145:26 | angularJSServices | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:145:10:145:26 | angularJSServices | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:145:10:145:26 | angularJSServices | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:11 | angular | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:11 | angular | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:11 | angular | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:11 | angular | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:11 | angular | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:18 | angular.module | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:18 | angular.module | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:18 | angular.module | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:18 | angular.module | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:18 | angular.module | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | angular ... p', []) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | angular ... p', []) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | angular ... p', []) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | angular ... p', []) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | angular ... p', []) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | exceptional return of angular ... p', []) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | exceptional return of angular ... p', []) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | exceptional return of angular ... p', []) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | exceptional return of angular ... p', []) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:146:31 | exceptional return of angular ... p', []) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:147:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:147:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:147:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:147:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:147:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | angular ...     }]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | exceptional return of angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | exceptional return of angular ...     }]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | exceptional return of angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | exceptional return of angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:149:11 | exceptional return of angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:150:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:150:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:150:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:150:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:150:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | angular ...      }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | exceptional return of angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | exceptional return of angular ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | exceptional return of angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | exceptional return of angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:152:10 | exceptional return of angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:154:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:154:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:154:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:154:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:154:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | angular ...     }]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | exceptional return of angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | exceptional return of angular ...     }]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | exceptional return of angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | exceptional return of angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:156:11 | exceptional return of angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:157:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:157:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:157:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:157:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:157:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | angular ...      }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | exceptional return of angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | exceptional return of angular ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | exceptional return of angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | exceptional return of angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:159:10 | exceptional return of angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:161:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:161:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:161:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:161:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:161:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | angular ...     }]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | exceptional return of angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | exceptional return of angular ...     }]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | exceptional return of angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | exceptional return of angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:163:11 | exceptional return of angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:164:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:164:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:164:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:164:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:164:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | angular ...      }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | exceptional return of angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | exceptional return of angular ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | exceptional return of angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | exceptional return of angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:166:10 | exceptional return of angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:168:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:168:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:168:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:168:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:168:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | angular ...     }]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | exceptional return of angular ...     }]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | exceptional return of angular ...     }]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | exceptional return of angular ...     }]) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | exceptional return of angular ...     }]) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:170:11 | exceptional return of angular ...     }]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:171:16 | angular ... factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:171:16 | angular ... factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:171:16 | angular ... factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:171:16 | angular ... factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:171:16 | angular ... factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | angular ...      }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | exceptional return of angular ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | exceptional return of angular ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | exceptional return of angular ...      }) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | exceptional return of angular ...      }) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:5:173:10 | exceptional return of angular ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:13:146:18 | module | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:13:146:18 | module | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:13:146:18 | module | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:13:146:18 | module | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:13:146:18 | module | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | CalleeFlexibleAccessPath | angular.module |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:20:146:26 | 'myApp' | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | CalleeFlexibleAccessPath | angular.module |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:146:29:146:30 | [] | receiverName | angular |
| autogenerated/Xss/DomBasedXss/tst.js:147:10:147:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:10:147:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:147:10:147:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:10:147:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:10:147:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | CalleeFlexibleAccessPath | angular.module().factory |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:18:147:39 | "xssSou ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | CalleeFlexibleAccessPath | angular.module().factory |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:42:149:10 | ["xssSi ...      }] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:43:147:59 | "xssSinkService1" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:147:61 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:147:61 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:147:61 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:147:61 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:147:61 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:62:149:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:147:71:147:85 | xssSinkService1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:27 | xssSinkService1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:27 | xssSinkService1 | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:27 | xssSinkService1 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:27 | xssSinkService1 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:27 | xssSinkService1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | exceptional return of xssSink ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | exceptional return of xssSink ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | exceptional return of xssSink ... search) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | exceptional return of xssSink ... search) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | exceptional return of xssSink ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | xssSink ... search) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | xssSink ... search) | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | xssSink ... search) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | xssSink ... search) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:13:148:51 | xssSink ... search) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:34 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:34 | window | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:34 | window | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:34 | window | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:34 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:43 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:43 | window.location | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:43 | window.location | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:43 | window.location | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:43 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | CalleeFlexibleAccessPath | xssSinkService1 |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:29:148:50 | window. ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:36:148:43 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:36:148:43 | location | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:36:148:43 | location | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:36:148:43 | location | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:36:148:43 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:148:45:148:50 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:148:45:148:50 | search | contextSurroundingFunctionParameters | ()\n(xssSinkService1) |
| autogenerated/Xss/DomBasedXss/tst.js:148:45:148:50 | search | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:148:45:148:50 | search | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:148:45:148:50 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:10:150:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:10:150:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:150:10:150:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:10:150:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:10:150:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | CalleeFlexibleAccessPath | angular.module().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:18:150:34 | "xssSinkService1" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:150:36 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:150:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:150:36 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:150:36 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:150:36 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | CalleeFlexibleAccessPath | angular.module().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:150:37:152:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:19 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:19 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | functio ... l(v); } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | functio ... l(v); } | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | functio ... l(v); } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | functio ... l(v); } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | functio ... l(v); } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:20:151:53 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:29:151:29 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:33 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:33 | $ | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:33 | $ | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:33 | $ | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:33 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | $("<div>") | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | exceptional return of $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | exceptional return of $("<div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | exceptional return of $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | exceptional return of $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:42 | exceptional return of $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:47 | $("<div>").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:47 | $("<div>").html | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:47 | $("<div>").html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:47 | $("<div>").html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:47 | $("<div>").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | $("<div>").html(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | $("<div>").html(v) | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | $("<div>").html(v) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | $("<div>").html(v) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | $("<div>").html(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | exceptional return of $("<div>").html(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | exceptional return of $("<div>").html(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | exceptional return of $("<div>").html(v) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | exceptional return of $("<div>").html(v) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:33:151:50 | exceptional return of $("<div>").html(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:35:151:41 | "<div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:44:151:47 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:44:151:47 | html | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:44:151:47 | html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:44:151:47 | html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:44:151:47 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:151:49:151:49 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:10:154:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:10:154:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:154:10:154:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:10:154:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:10:154:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:18:154:41 | "xssSou ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | CalleeFlexibleAccessPath | angular.module().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:44:156:10 | ["xssSo ...      }] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:45:154:62 | "xssSourceService" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:154:64 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:154:64 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:154:64 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:154:64 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:154:64 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:65:156:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:154:74:154:89 | xssSourceService | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:13 | $ | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:13 | $ | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:13 | $ | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | $("<div>") | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | exceptional return of $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | exceptional return of $("<div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | exceptional return of $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | exceptional return of $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:22 | exceptional return of $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:27 | $("<div>").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:27 | $("<div>").html | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:27 | $("<div>").html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:27 | $("<div>").html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:27 | $("<div>").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | $("<div ... vice()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | $("<div ... vice()) | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | $("<div ... vice()) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | $("<div ... vice()) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | $("<div ... vice()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | exceptional return of $("<div ... vice()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | exceptional return of $("<div ... vice()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | exceptional return of $("<div ... vice()) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | exceptional return of $("<div ... vice()) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:13:155:47 | exceptional return of $("<div ... vice()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:15:155:21 | "<div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:24:155:27 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:24:155:27 | html | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:24:155:27 | html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:24:155:27 | html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:24:155:27 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:44 | xssSourceService | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:44 | xssSourceService | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:44 | xssSourceService | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:44 | xssSourceService | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:44 | xssSourceService | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | exceptional return of xssSourceService() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | exceptional return of xssSourceService() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | exceptional return of xssSourceService() | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | exceptional return of xssSourceService() | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | exceptional return of xssSourceService() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | contextSurroundingFunctionParameters | ()\n(xssSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:155:29:155:46 | xssSourceService() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:10:157:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:10:157:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:157:10:157:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:10:157:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:10:157:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:18:157:35 | "xssSourceService" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:157:37 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:157:37 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:157:37 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:157:37 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:157:37 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:157:38:159:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:19 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:19 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | functio ... earch } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | functio ... earch } | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | functio ... earch } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | functio ... earch } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | functio ... earch } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:20:158:63 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:45 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:45 | window | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:45 | window | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:45 | window | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:45 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:54 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:54 | window.location | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:54 | window.location | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:54 | window.location | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:54 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:61 | window. ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:61 | window. ... .search | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:61 | window. ... .search | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:61 | window. ... .search | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:40:158:61 | window. ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:47:158:54 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:47:158:54 | location | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:47:158:54 | location | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:47:158:54 | location | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:47:158:54 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:158:56:158:61 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:158:56:158:61 | search | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:158:56:158:61 | search | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:158:56:158:61 | search | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:158:56:158:61 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:10:161:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:10:161:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:161:10:161:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:10:161:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:10:161:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:18:161:44 | "innoce ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:47:163:10 | ["xssSi ...      }] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:48:161:64 | "xssSinkService2" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:161:66 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:161:66 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:161:66 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:161:66 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:161:66 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n(xssSinkService2) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:67:163:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | contextSurroundingFunctionParameters | ()\n(xssSinkService2) |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:161:76:161:90 | xssSinkService2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:27 | xssSinkService2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:27 | xssSinkService2 | contextSurroundingFunctionParameters | ()\n(xssSinkService2) |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:27 | xssSinkService2 | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:27 | xssSinkService2 | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:27 | xssSinkService2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | exceptional return of xssSink ... ocent") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | exceptional return of xssSink ... ocent") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | exceptional return of xssSink ... ocent") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | exceptional return of xssSink ... ocent") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | exceptional return of xssSink ... ocent") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | xssSink ... ocent") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | xssSink ... ocent") | contextSurroundingFunctionParameters | ()\n(xssSinkService2) |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | xssSink ... ocent") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | xssSink ... ocent") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:162:13:162:39 | xssSink ... ocent") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | CalleeFlexibleAccessPath | xssSinkService2 |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | contextSurroundingFunctionParameters | ()\n(xssSinkService2) |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:162:29:162:38 | "innocent" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:10:164:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:10:164:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:164:10:164:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:10:164:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:10:164:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:18:164:34 | "xssSinkService2" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:164:36 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:164:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:164:36 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:164:36 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:164:36 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:164:37:166:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:19 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:19 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | functio ... l(v); } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | functio ... l(v); } | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | functio ... l(v); } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | functio ... l(v); } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | functio ... l(v); } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:20:165:53 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:29:165:29 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:33 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:33 | $ | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:33 | $ | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:33 | $ | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:33 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | $("<div>") | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | exceptional return of $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | exceptional return of $("<div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | exceptional return of $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | exceptional return of $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:42 | exceptional return of $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:47 | $("<div>").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:47 | $("<div>").html | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:47 | $("<div>").html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:47 | $("<div>").html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:47 | $("<div>").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | $("<div>").html(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | $("<div>").html(v) | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | $("<div>").html(v) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | $("<div>").html(v) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | $("<div>").html(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | exceptional return of $("<div>").html(v) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | exceptional return of $("<div>").html(v) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | exceptional return of $("<div>").html(v) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | exceptional return of $("<div>").html(v) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:33:165:50 | exceptional return of $("<div>").html(v) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:35:165:41 | "<div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:44:165:47 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:44:165:47 | html | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:44:165:47 | html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:44:165:47 | html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:44:165:47 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | contextSurroundingFunctionParameters | ()\n()\n(v) |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:165:49:165:49 | v | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:10:168:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:10:168:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:168:10:168:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:10:168:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:10:168:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:18:168:46 | "innoce ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:49:170:10 | ["innoc ...      }] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:50:168:72 | "innoce ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:168:74 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:168:74 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:168:74 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:168:74 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:168:74 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:75:170:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocen ... Service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocen ... Service | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocen ... Service | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocen ... Service | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocen ... Service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocentSourceService | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocentSourceService | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocentSourceService | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocentSourceService | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:168:84:168:104 | innocentSourceService | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:13 | $ | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:13 | $ | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:13 | $ | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | $("<div>") | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | exceptional return of $("<div>") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | exceptional return of $("<div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | exceptional return of $("<div>") | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | exceptional return of $("<div>") | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:22 | exceptional return of $("<div>") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:27 | $("<div>").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:27 | $("<div>").html | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:27 | $("<div>").html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:27 | $("<div>").html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:27 | $("<div>").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | $("<div ... vice()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | $("<div ... vice()) | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | $("<div ... vice()) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | $("<div ... vice()) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | $("<div ... vice()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | exceptional return of $("<div ... vice()) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | exceptional return of $("<div ... vice()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | exceptional return of $("<div ... vice()) | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | exceptional return of $("<div ... vice()) | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:13:169:52 | exceptional return of $("<div ... vice()) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:15:169:21 | "<div>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:24:169:27 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:24:169:27 | html | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:24:169:27 | html | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:24:169:27 | html | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:24:169:27 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:49 | innocen ... Service | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:49 | innocen ... Service | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:49 | innocen ... Service | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:49 | innocen ... Service | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:49 | innocen ... Service | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | exceptional return of innocen ... rvice() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | exceptional return of innocen ... rvice() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | exceptional return of innocen ... rvice() | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | exceptional return of innocen ... rvice() | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | exceptional return of innocen ... rvice() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | contextSurroundingFunctionParameters | ()\n(innocentSourceService) |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:169:29:169:51 | innocen ... rvice() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:10:171:16 | factory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:10:171:16 | factory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:171:10:171:16 | factory | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:10:171:16 | factory | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:10:171:16 | factory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:18:171:40 | "innoce ... ervice" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:171:42 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:171:42 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:171:42 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:171:42 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:171:42 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | CalleeFlexibleAccessPath | angular.module().factory().factory().factory().factory().factory().factory().factory().factory |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | functio ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:171:43:173:9 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:19 | this | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:19 | this | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | 'arguments' object of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | 'arguments' object of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | exceptional return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | exceptional return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | functio ... cent" } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | functio ... cent" } | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | functio ... cent" } | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | functio ... cent" } | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | functio ... cent" } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | return of anonymous function | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | return of anonymous function | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:20:172:51 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:172:40:172:49 | "innocent" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:172:40:172:49 | "innocent" | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:172:40:172:49 | "innocent" | enclosingFunctionBody | angular module myApp factory xssSource_to_service xssSinkService1 xssSinkService1 xssSinkService1 window location search factory xssSinkService1 v $ <div> html v factory xssSource_from_service xssSourceService xssSourceService $ <div> html xssSourceService factory xssSourceService window location search factory innocentSource_to_service xssSinkService2 xssSinkService2 xssSinkService2 innocent factory xssSinkService2 v $ <div> html v factory innocentSource_from_service innocentSourceService innocentSourceService $ <div> html innocentSourceService factory innocentSourceService innocent |
| autogenerated/Xss/DomBasedXss/tst.js:172:40:172:49 | "innocent" | enclosingFunctionName | angularJSServices |
| autogenerated/Xss/DomBasedXss/tst.js:172:40:172:49 | "innocent" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:176:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:176:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:176:0 | this | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:176:0 | this | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:176:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | 'arguments' object of function testDOMParser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | 'arguments' object of function testDOMParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | 'arguments' object of function testDOMParser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | 'arguments' object of function testDOMParser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | 'arguments' object of function testDOMParser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | exceptional return of function testDOMParser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | exceptional return of function testDOMParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | exceptional return of function testDOMParser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | exceptional return of function testDOMParser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | exceptional return of function testDOMParser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | return of function testDOMParser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | return of function testDOMParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | return of function testDOMParser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | return of function testDOMParser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:176:1:181:1 | return of function testDOMParser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:176:10:176:22 | testDOMParser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:176:10:176:22 | testDOMParser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:176:10:176:22 | testDOMParser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:14 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:14 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:14 | target | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:14 | target | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:14 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target  ... .search | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target  ... .search | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:9:177:41 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:25 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:25 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:25 | document | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:25 | document | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:25 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:34 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:34 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:34 | document.location | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:34 | document.location | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:34 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:41 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:41 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:41 | documen ... .search | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:41 | documen ... .search | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:18:177:41 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:27:177:34 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:27:177:34 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:27:177:34 | location | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:27:177:34 | location | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:27:177:34 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:177:36:177:41 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:177:36:177:41 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:177:36:177:41 | search | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:177:36:177:41 | search | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:177:36:177:41 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:14 | parser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:14 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:14 | parser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:14 | parser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:14 | parser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser  ... arser() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser  ... arser() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser  ... arser() | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser  ... arser() | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:9:179:32 | parser  ... arser() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | exceptional return of new DOMParser() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | exceptional return of new DOMParser() | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | exceptional return of new DOMParser() | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | exceptional return of new DOMParser() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | new DOMParser() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | new DOMParser() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | new DOMParser() | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | new DOMParser() | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:18:179:32 | new DOMParser() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:179:22:179:30 | DOMParser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:179:22:179:30 | DOMParser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:179:22:179:30 | DOMParser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:179:22:179:30 | DOMParser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:179:22:179:30 | DOMParser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:10 | parser | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:10 | parser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:10 | parser | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:10 | parser | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:10 | parser | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:26 | parser. ... mString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:26 | parser. ... mString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:26 | parser. ... mString | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:26 | parser. ... mString | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:26 | parser. ... mString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | exceptional return of parser. ... n/xml") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | exceptional return of parser. ... n/xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | exceptional return of parser. ... n/xml") | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | exceptional return of parser. ... n/xml") | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | exceptional return of parser. ... n/xml") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | parser. ... n/xml") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | parser. ... n/xml") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | parser. ... n/xml") | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | parser. ... n/xml") | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:5:180:53 | parser. ... n/xml") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:12:180:26 | parseFromString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:12:180:26 | parseFromString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:12:180:26 | parseFromString | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:12:180:26 | parseFromString | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:12:180:26 | parseFromString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | CalleeFlexibleAccessPath | parser.parseFromString |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:28:180:33 | target | receiverName | parser |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | CalleeFlexibleAccessPath | parser.parseFromString |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | enclosingFunctionBody | target document location search parser DOMParser parser parseFromString target application/xml |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | enclosingFunctionName | testDOMParser |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:180:36:180:52 | "application/xml" | receiverName | parser |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:183:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:183:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:183:0 | this | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:183:0 | this | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:183:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | 'arguments' object of function references | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | 'arguments' object of function references | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | 'arguments' object of function references | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | 'arguments' object of function references | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | 'arguments' object of function references | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | exceptional return of function references | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | exceptional return of function references | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | exceptional return of function references | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | exceptional return of function references | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | exceptional return of function references | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | return of function references | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | return of function references | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | return of function references | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | return of function references | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:183:1:194:1 | return of function references | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:183:10:183:19 | references | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:183:10:183:19 | references | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:183:10:183:19 | references | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:15 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:15 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:15 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:15 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:15 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted ... .search | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted ... .search | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:9:184:42 | tainted ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:26 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:26 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:26 | document | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:26 | document | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:26 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:35 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:35 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:35 | document.location | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:35 | document.location | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:35 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:42 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:42 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:42 | documen ... .search | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:42 | documen ... .search | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:19:184:42 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:28:184:35 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:28:184:35 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:28:184:35 | location | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:28:184:35 | location | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:28:184:35 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:184:37:184:42 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:184:37:184:42 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:184:37:184:42 | search | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:184:37:184:42 | search | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:184:37:184:42 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:12 | document | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:12 | document | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:17 | document.body | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:17 | document.body | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:17 | document.body | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:17 | document.body | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:27 | documen ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:27 | documen ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:27 | documen ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:27 | documen ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:37 | documen ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:37 | documen ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:37 | documen ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:37 | documen ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:5:186:37 | documen ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:14:186:17 | body | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:14:186:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:14:186:17 | body | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:14:186:17 | body | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:14:186:17 | body | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:19:186:27 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:19:186:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:19:186:27 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:19:186:27 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:19:186:27 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:186:31:186:37 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:12 | document | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:12 | document | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:26 | documen ... Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:26 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:26 | documen ... Element | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:26 | documen ... Element | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:26 | documen ... Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | documen ... ement() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | documen ... ement() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | documen ... ement() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | documen ... ement() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | documen ... ement() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | exceptional return of documen ... ement() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | exceptional return of documen ... ement() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | exceptional return of documen ... ement() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | exceptional return of documen ... ement() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:28 | exceptional return of documen ... ement() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:38 | documen ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:38 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:38 | documen ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:38 | documen ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:38 | documen ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:48 | documen ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:48 | documen ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:48 | documen ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:48 | documen ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:5:188:48 | documen ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:14:188:26 | createElement | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:14:188:26 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:14:188:26 | createElement | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:14:188:26 | createElement | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:14:188:26 | createElement | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:30:188:38 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:30:188:38 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:30:188:38 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:30:188:38 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:30:188:38 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:188:42:188:48 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:17 | createElement | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:17 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:17 | createElement | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:17 | createElement | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:17 | createElement | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | createElement() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | createElement() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | createElement() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | createElement() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | createElement() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | exceptional return of createElement() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | exceptional return of createElement() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | exceptional return of createElement() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | exceptional return of createElement() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:19 | exceptional return of createElement() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:29 | createE ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:29 | createE ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:29 | createE ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:29 | createE ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:29 | createE ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:39 | createE ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:39 | createE ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:39 | createE ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:39 | createE ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:5:189:39 | createE ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:21:189:29 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:21:189:29 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:21:189:29 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:21:189:29 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:21:189:29 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:189:33:189:39 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:12 | document | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:12 | document | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:35 | documen ... assName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:35 | documen ... assName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:35 | documen ... assName | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:35 | documen ... assName | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:35 | documen ... assName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | documen ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | documen ... sName() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | documen ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | documen ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | documen ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | exceptional return of documen ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | exceptional return of documen ... sName() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | exceptional return of documen ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | exceptional return of documen ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:37 | exceptional return of documen ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:40 | documen ... me()[0] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:40 | documen ... me()[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:40 | documen ... me()[0] | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:40 | documen ... me()[0] | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:40 | documen ... me()[0] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:50 | documen ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:50 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:50 | documen ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:50 | documen ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:50 | documen ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:60 | documen ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:60 | documen ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:60 | documen ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:60 | documen ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:5:191:60 | documen ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:14:191:35 | getElem ... assName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:14:191:35 | getElem ... assName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:14:191:35 | getElem ... assName | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:14:191:35 | getElem ... assName | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:14:191:35 | getElem ... assName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:39:191:39 | 0 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:39:191:39 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:39:191:39 | 0 | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:39:191:39 | 0 | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:39:191:39 | 0 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:42:191:50 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:42:191:50 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:42:191:50 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:42:191:50 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:42:191:50 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:191:54:191:60 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:26 | getElem ... assName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:26 | getElem ... assName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:26 | getElem ... assName | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:26 | getElem ... assName | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:26 | getElem ... assName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | exceptional return of getElem ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | exceptional return of getElem ... sName() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | exceptional return of getElem ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | exceptional return of getElem ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | exceptional return of getElem ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | getElem ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | getElem ... sName() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | getElem ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | getElem ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:28 | getElem ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:31 | getElem ... me()[0] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:31 | getElem ... me()[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:31 | getElem ... me()[0] | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:31 | getElem ... me()[0] | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:31 | getElem ... me()[0] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:41 | getElem ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:41 | getElem ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:41 | getElem ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:41 | getElem ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:41 | getElem ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:51 | getElem ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:51 | getElem ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:51 | getElem ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:51 | getElem ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:5:192:51 | getElem ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:30:192:30 | 0 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:30:192:30 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:30:192:30 | 0 | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:30:192:30 | 0 | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:30:192:30 | 0 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:33:192:41 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:33:192:41 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:33:192:41 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:33:192:41 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:33:192:41 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:192:45:192:51 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:26 | getElem ... assName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:26 | getElem ... assName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:26 | getElem ... assName | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:26 | getElem ... assName | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:26 | getElem ... assName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | exceptional return of getElem ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | exceptional return of getElem ... sName() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | exceptional return of getElem ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | exceptional return of getElem ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | exceptional return of getElem ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | getElem ... sName() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | getElem ... sName() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | getElem ... sName() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | getElem ... sName() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:28 | getElem ... sName() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:33 | getElem ... ().item | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:33 | getElem ... ().item | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:33 | getElem ... ().item | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:33 | getElem ... ().item | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:33 | getElem ... ().item | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | exceptional return of getElem ... .item() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | exceptional return of getElem ... .item() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | exceptional return of getElem ... .item() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | exceptional return of getElem ... .item() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | exceptional return of getElem ... .item() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | getElem ... .item() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | getElem ... .item() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | getElem ... .item() | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | getElem ... .item() | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:35 | getElem ... .item() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:45 | getElem ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:45 | getElem ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:45 | getElem ... nerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:45 | getElem ... nerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:45 | getElem ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:55 | getElem ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:55 | getElem ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:55 | getElem ... tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:55 | getElem ... tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:5:193:55 | getElem ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:30:193:33 | item | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:30:193:33 | item | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:30:193:33 | item | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:30:193:33 | item | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:30:193:33 | item | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:37:193:45 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:37:193:45 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:37:193:45 | innerHTML | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:37:193:45 | innerHTML | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:37:193:45 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | enclosingFunctionBody | tainted document location search document body innerHTML tainted document createElement innerHTML tainted createElement innerHTML tainted document 0 getElementsByClassName 0 innerHTML tainted getElementsByClassName 0 0 innerHTML tainted getElementsByClassName item innerHTML tainted |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | enclosingFunctionName | references |
| autogenerated/Xss/DomBasedXss/tst.js:193:49:193:55 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:0 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:0 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:1 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:1 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:1 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:1 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:196:1 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | 'arguments' object of function react | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | 'arguments' object of function react | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | 'arguments' object of function react | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | 'arguments' object of function react | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | 'arguments' object of function react | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | exceptional return of function react | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | exceptional return of function react | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | exceptional return of function react | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | exceptional return of function react | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | exceptional return of function react | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | functio ... }/>);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | functio ... }/>);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | functio ... }/>);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | return of function react | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | return of function react | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | return of function react | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | return of function react | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:196:1:256:1 | return of function react | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:196:10:196:14 | react | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:196:10:196:14 | react | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:196:10:196:14 | react | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:15 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted ... .search | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted ... .search | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:9:197:42 | tainted ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:26 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:26 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:26 | document | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:26 | document | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:26 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:35 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:35 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:35 | document.location | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:35 | document.location | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:35 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:42 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:42 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:42 | documen ... .search | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:42 | documen ... .search | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:19:197:42 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:28:197:35 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:28:197:35 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:28:197:35 | location | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:28:197:35 | location | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:28:197:35 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:197:37:197:42 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:197:37:197:42 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:197:37:197:42 | search | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:197:37:197:42 | search | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:197:37:197:42 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:9 | React | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:9 | React | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:9 | React | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:9 | React | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:9 | React | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:23 | React.createElement | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:23 | React.createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:23 | React.createElement | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:23 | React.createElement | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:23 | React.createElement | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | React.c ... nted}}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | React.c ... nted}}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | React.c ... nted}}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | React.c ... nted}}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | React.c ... nted}}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | exceptional return of React.c ... nted}}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | exceptional return of React.c ... nted}}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | exceptional return of React.c ... nted}}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | exceptional return of React.c ... nted}}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:5:199:76 | exceptional return of React.c ... nted}}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:11:199:23 | createElement | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:11:199:23 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:11:199:23 | createElement | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:11:199:23 | createElement | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:11:199:23 | createElement | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | CalleeFlexibleAccessPath | React.createElement |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:25:199:29 | "div" | receiverName | React |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | CalleeFlexibleAccessPath | React.createElement |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:32:199:75 | {danger ... inted}} | receiverName | React |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:55 | dangero ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:55 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:55 | dangero ... nerHTML | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:55 | dangero ... nerHTML | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:55 | dangero ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:33:199:74 | dangero ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | CalleeFlexibleAccessPath | React.createElement |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | InputAccessPathFromCallee | 1.dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:58:199:74 | {__html: tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:64 | __html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:64 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:64 | __html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:64 | __html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:64 | __html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:59:199:73 | __html: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | CalleeFlexibleAccessPath | React.createElement |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | InputAccessPathFromCallee | 1.dangerouslySetInnerHTML.__html |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:199:67:199:73 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:9 | React | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:9 | React | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:9 | React | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:9 | React | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:9 | React | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:23 | React.createFactory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:23 | React.createFactory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:23 | React.createFactory | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:23 | React.createFactory | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:23 | React.createFactory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | React.c ... ("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | React.c ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | React.c ... ("div") | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | React.c ... ("div") | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | React.c ... ("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | exceptional return of React.c ... ("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | exceptional return of React.c ... ("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | exceptional return of React.c ... ("div") | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | exceptional return of React.c ... ("div") | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:30 | exceptional return of React.c ... ("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | React.c ... nted}}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | React.c ... nted}}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | React.c ... nted}}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | React.c ... nted}}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | React.c ... nted}}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | exceptional return of React.c ... nted}}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | exceptional return of React.c ... nted}}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | exceptional return of React.c ... nted}}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | exceptional return of React.c ... nted}}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:5:200:76 | exceptional return of React.c ... nted}}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:11:200:23 | createFactory | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:11:200:23 | createFactory | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:11:200:23 | createFactory | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:11:200:23 | createFactory | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:11:200:23 | createFactory | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | CalleeFlexibleAccessPath | React.createFactory |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:25:200:29 | "div" | receiverName | React |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | CalleeFlexibleAccessPath | React.createFactory() |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:32:200:75 | {danger ... inted}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:55 | dangero ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:55 | dangero ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:55 | dangero ... nerHTML | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:55 | dangero ... nerHTML | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:55 | dangero ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:33:200:74 | dangero ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | CalleeFlexibleAccessPath | React.createFactory() |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | InputAccessPathFromCallee | 0.dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:58:200:74 | {__html: tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:64 | __html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:64 | __html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:64 | __html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:64 | __html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:64 | __html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:59:200:73 | __html: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | CalleeFlexibleAccessPath | React.createFactory() |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | InputAccessPathFromCallee | 0.dangerouslySetInnerHTML.__html |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:200:67:200:73 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:202:5:221:5 | class C ... }\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:202:5:221:5 | class C ... }\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:202:5:221:5 | class C ... }\\n    } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:202:5:221:5 | class C ... }\\n    } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:202:5:221:5 | class C ... }\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:202:11:202:12 | C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:202:11:202:12 | C1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:202:11:202:12 | C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:202:11:202:12 | C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:202:11:202:12 | C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:26 | React | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:26 | React | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:26 | React | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:26 | React | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:26 | React | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:36 | React.Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:36 | React.Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:36 | React.Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:36 | React.Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:202:22:202:36 | React.Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:202:28:202:36 | Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:202:28:202:36 | Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:202:28:202:36 | Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:202:28:202:36 | Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:202:28:202:36 | Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:203:19 | constructor | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:203:19 | constructor | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:203:19 | constructor | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:203:19 | constructor | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:203:19 | constructor | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:9:209:9 | constru ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:203:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | 'arguments' object of constructor of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | 'arguments' object of constructor of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | 'arguments' object of constructor of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | 'arguments' object of constructor of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | 'arguments' object of constructor of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | () {\\n   ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | exceptional return of constructor of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | exceptional return of constructor of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | exceptional return of constructor of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | exceptional return of constructor of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | exceptional return of constructor of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | return of constructor of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | return of constructor of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | return of constructor of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | return of constructor of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:203:20:209:9 | return of constructor of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:22 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:22 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:22 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:22 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:22 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:31 | this.state.tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:31 | this.state.tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:31 | this.state.tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:31 | this.state.tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:31 | this.state.tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:41 | this.st ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:41 | this.st ... tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:41 | this.st ... tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:41 | this.st ... tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:13:204:41 | this.st ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:18:204:22 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:18:204:22 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:18:204:22 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:18:204:22 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:18:204:22 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:24:204:31 | tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:24:204:31 | tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:24:204:31 | tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:24:204:31 | tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:24:204:31 | tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | assignedToPropName | tainted1 |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:204:35:204:41 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:22 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:22 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:22 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:22 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:22 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:33 | this.st ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:33 | this.st ... Tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:33 | this.st ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:33 | this.st ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:33 | this.st ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:46 | this.st ... ookup() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:46 | this.st ... ookup() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:46 | this.st ... ookup() | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:46 | this.st ... ookup() | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:13:205:46 | this.st ... ookup() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:18:205:22 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:18:205:22 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:18:205:22 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:18:205:22 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:18:205:22 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:24:205:33 | notTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:24:205:33 | notTainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:24:205:33 | notTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:24:205:33 | notTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:24:205:33 | notTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:44 | dbLookup | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:44 | dbLookup | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:44 | dbLookup | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:44 | dbLookup | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:44 | dbLookup | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | assignedToPropName | notTainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | dbLookup() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | exceptional return of dbLookup() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | exceptional return of dbLookup() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | exceptional return of dbLookup() | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | exceptional return of dbLookup() | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:205:37:205:46 | exceptional return of dbLookup() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:25 | this.setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:25 | this.setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:25 | this.setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:25 | this.setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:25 | this.setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | exceptional return of this.se ... ted })) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | exceptional return of this.se ... ted })) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | exceptional return of this.se ... ted })) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | exceptional return of this.se ... ted })) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | exceptional return of this.se ... ted })) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | this.se ... ted })) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | this.se ... ted })) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | this.se ... ted })) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | this.se ... ted })) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:13:206:56 | this.se ... ted })) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:18:206:25 | setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:18:206:25 | setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:18:206:25 | setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:18:206:25 | setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:18:206:25 | setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:26 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:26 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:26 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:26 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:26 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | 'arguments' object of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | 'arguments' object of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | CalleeFlexibleAccessPath | this.setState |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | () => ( ... nted }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | exceptional return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | exceptional return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:27:206:55 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:33:206:55 | ({ tain ... nted }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:33:206:55 | ({ tain ... nted }) | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:33:206:55 | ({ tain ... nted }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:33:206:55 | ({ tain ... nted }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:33:206:55 | ({ tain ... nted }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:34:206:54 | { taint ... inted } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:34:206:54 | { taint ... inted } | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:34:206:54 | { taint ... inted } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:34:206:54 | { taint ... inted } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:34:206:54 | { taint ... inted } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:43 | tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:43 | tainted2 | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:43 | tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:43 | tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:43 | tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:36:206:52 | tainted2: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | assignedToPropName | tainted2 |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | contextSurroundingFunctionParameters | ()\n()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:206:46:206:52 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:22 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:22 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:22 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:22 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:22 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:46 | this.st ... inted } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:46 | this.st ... inted } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:46 | this.st ... inted } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:46 | this.st ... inted } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:13:207:46 | this.st ... inted } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:18:207:22 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:18:207:22 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:18:207:22 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:18:207:22 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:18:207:22 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | assignedToPropName | state |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:26:207:46 | { taint ... inted } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:35 | tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:35 | tainted3 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:35 | tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:35 | tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:35 | tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:28:207:44 | tainted3: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | assignedToPropName | tainted3 |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:207:38:207:44 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:22 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:22 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:22 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:22 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:22 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:31 | this.state.tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:31 | this.state.tainted4 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:31 | this.state.tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:31 | this.state.tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:31 | this.state.tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:41 | this.st ... tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:41 | this.st ... tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:41 | this.st ... tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:41 | this.st ... tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:13:208:41 | this.st ... tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:18:208:22 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:18:208:22 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:18:208:22 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:18:208:22 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:18:208:22 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:24:208:31 | tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:24:208:31 | tainted4 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:24:208:31 | tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:24:208:31 | tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:24:208:31 | tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | assignedToPropName | tainted4 |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:208:35:208:41 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:211:12 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:211:12 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:211:12 | test | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:211:12 | test | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:211:12 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:9:220:9 | test()  ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:211:12 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:211:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:211:12 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:211:12 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:211:12 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | 'arguments' object of method test of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | 'arguments' object of method test of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | 'arguments' object of method test of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | 'arguments' object of method test of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | 'arguments' object of method test of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | assignedToPropName | test |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | () {\\n   ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | exceptional return of method test of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | exceptional return of method test of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | exceptional return of method test of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | exceptional return of method test of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | exceptional return of method test of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | return of method test of class C1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | return of method test of class C1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | return of method test of class C1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | return of method test of class C1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:211:13:220:9 | return of method test of class C1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | $('myId ... inted1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | $('myId ... inted1) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | $('myId ... inted1) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | $('myId ... inted1) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | $('myId ... inted1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | exceptional return of $('myId ... inted1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | exceptional return of $('myId ... inted1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | exceptional return of $('myId ... inted1) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | exceptional return of $('myId ... inted1) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:13:212:47 | exceptional return of $('myId ... inted1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:15:212:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:23:212:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:23:212:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:23:212:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:23:212:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:23:212:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:37 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:37 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:37 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:37 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:37 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:28:212:46 | this.state.tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:33:212:37 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:33:212:37 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:33:212:37 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:33:212:37 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:33:212:37 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:212:39:212:46 | tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:212:39:212:46 | tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:212:39:212:46 | tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:212:39:212:46 | tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:212:39:212:46 | tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | $('myId ... inted2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | $('myId ... inted2) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | $('myId ... inted2) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | $('myId ... inted2) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | $('myId ... inted2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | exceptional return of $('myId ... inted2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | exceptional return of $('myId ... inted2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | exceptional return of $('myId ... inted2) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | exceptional return of $('myId ... inted2) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:13:213:47 | exceptional return of $('myId ... inted2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:15:213:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:23:213:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:23:213:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:23:213:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:23:213:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:23:213:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:37 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:37 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:37 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:37 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:37 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:28:213:46 | this.state.tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:33:213:37 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:33:213:37 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:33:213:37 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:33:213:37 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:33:213:37 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:213:39:213:46 | tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:213:39:213:46 | tainted2 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:213:39:213:46 | tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:213:39:213:46 | tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:213:39:213:46 | tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | $('myId ... inted3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | $('myId ... inted3) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | $('myId ... inted3) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | $('myId ... inted3) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | $('myId ... inted3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | exceptional return of $('myId ... inted3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | exceptional return of $('myId ... inted3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | exceptional return of $('myId ... inted3) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | exceptional return of $('myId ... inted3) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:13:214:47 | exceptional return of $('myId ... inted3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:15:214:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:23:214:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:23:214:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:23:214:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:23:214:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:23:214:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:37 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:37 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:37 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:37 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:37 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:28:214:46 | this.state.tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:33:214:37 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:33:214:37 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:33:214:37 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:33:214:37 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:33:214:37 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:214:39:214:46 | tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:214:39:214:46 | tainted3 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:214:39:214:46 | tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:214:39:214:46 | tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:214:39:214:46 | tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | $('myId ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | $('myId ... ainted) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | $('myId ... ainted) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | $('myId ... ainted) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | $('myId ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | exceptional return of $('myId ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | exceptional return of $('myId ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | exceptional return of $('myId ... ainted) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | exceptional return of $('myId ... ainted) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:13:215:49 | exceptional return of $('myId ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:15:215:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:23:215:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:23:215:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:23:215:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:23:215:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:23:215:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:37 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:37 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:37 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:37 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:37 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:28:215:48 | this.st ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:33:215:37 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:33:215:37 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:33:215:37 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:33:215:37 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:33:215:37 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:215:39:215:48 | notTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:215:39:215:48 | notTainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:215:39:215:48 | notTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:215:39:215:48 | notTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:215:39:215:48 | notTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:25 | this.setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:25 | this.setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:25 | this.setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:25 | this.setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:217:25 | this.setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | exceptional return of this.se ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | exceptional return of this.se ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | exceptional return of this.se ...      }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | exceptional return of this.se ...      }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | exceptional return of this.se ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | this.se ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | this.se ...      }) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | this.se ...      }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | this.se ...      }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:13:219:14 | this.se ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:18:217:25 | setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:18:217:25 | setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:217:18:217:25 | setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:18:217:25 | setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:18:217:25 | setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:217:35 | prevState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | 'arguments' object of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | 'arguments' object of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | exceptional return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | exceptional return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | CalleeFlexibleAccessPath | this.setState |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | prevSta ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:217:27:219:13 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:17 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:17 | $ | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:17 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:17 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:17 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | $('myId') | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:25 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:30 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:30 | $('myId').html | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:30 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:30 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:30 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | $('myId ... inted4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | $('myId ... inted4) | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | $('myId ... inted4) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | $('myId ... inted4) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | $('myId ... inted4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | exceptional return of $('myId ... inted4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | exceptional return of $('myId ... inted4) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | exceptional return of $('myId ... inted4) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | exceptional return of $('myId ... inted4) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:17:218:50 | exceptional return of $('myId ... inted4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:19:218:24 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:27:218:30 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:27:218:30 | html | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:27:218:30 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:27:218:30 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:27:218:30 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:40 | prevState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:40 | prevState | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:40 | prevState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:40 | prevState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:40 | prevState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:32:218:49 | prevState.tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:218:42:218:49 | tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:218:42:218:49 | tainted4 | contextSurroundingFunctionParameters | ()\n()\n(prevState) |
| autogenerated/Xss/DomBasedXss/tst.js:218:42:218:49 | tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:218:42:218:49 | tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:218:42:218:49 | tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | class C ... }\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | class C ... }\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | class C ... }\\n    } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | class C ... }\\n    } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:5:234:5 | class C ... }\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:11:223:12 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:11:223:12 | C2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:223:11:223:12 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:11:223:12 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:11:223:12 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:26 | React | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:26 | React | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:26 | React | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:26 | React | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:26 | React | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:36 | React.Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:36 | React.Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:36 | React.Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:36 | React.Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:22:223:36 | React.Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:28:223:36 | Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:28:223:36 | Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:223:28:223:36 | Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:28:223:36 | Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:28:223:36 | Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | 'arguments' object of default constructor of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | 'arguments' object of default constructor of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | 'arguments' object of default constructor of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | 'arguments' object of default constructor of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | 'arguments' object of default constructor of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | (...arg ... rgs); } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | ...args | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | ...args | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | ...args | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | ...args | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | ...args | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | args | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constru ... rgs); } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constructor | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constructor | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constructor | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constructor | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | constructor | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of default constructor of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of default constructor of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of default constructor of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of default constructor of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of default constructor of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of super(...args) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of super(...args) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of super(...args) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of super(...args) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | exceptional return of super(...args) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | return of default constructor of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | return of default constructor of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | return of default constructor of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | return of default constructor of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | return of default constructor of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super(...args) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super(...args) | contextSurroundingFunctionParameters | ()\n(args) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super(...args) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super(...args) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | super(...args) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:223:38:223:37 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:224:12 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:224:12 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:224:12 | test | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:224:12 | test | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:224:12 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:9:233:9 | test()  ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:224:12 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:224:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:224:12 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:224:12 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:224:12 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | 'arguments' object of method test of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | 'arguments' object of method test of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | 'arguments' object of method test of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | 'arguments' object of method test of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | 'arguments' object of method test of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | assignedToPropName | test |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | () {\\n   ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | exceptional return of method test of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | exceptional return of method test of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | exceptional return of method test of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | exceptional return of method test of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | exceptional return of method test of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | return of method test of class C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | return of method test of class C2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | return of method test of class C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | return of method test of class C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:224:13:233:9 | return of method test of class C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | $('myId ... inted1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | $('myId ... inted1) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | $('myId ... inted1) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | $('myId ... inted1) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | $('myId ... inted1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | exceptional return of $('myId ... inted1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | exceptional return of $('myId ... inted1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | exceptional return of $('myId ... inted1) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | exceptional return of $('myId ... inted1) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:13:225:47 | exceptional return of $('myId ... inted1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:15:225:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:23:225:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:23:225:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:23:225:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:23:225:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:23:225:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:37 | this.props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:37 | this.props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:37 | this.props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:37 | this.props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:37 | this.props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:28:225:46 | this.props.tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:33:225:37 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:33:225:37 | props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:33:225:37 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:33:225:37 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:33:225:37 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:225:39:225:46 | tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:225:39:225:46 | tainted1 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:225:39:225:46 | tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:225:39:225:46 | tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:225:39:225:46 | tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | $('myId ... inted2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | $('myId ... inted2) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | $('myId ... inted2) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | $('myId ... inted2) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | $('myId ... inted2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | exceptional return of $('myId ... inted2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | exceptional return of $('myId ... inted2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | exceptional return of $('myId ... inted2) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | exceptional return of $('myId ... inted2) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:13:226:47 | exceptional return of $('myId ... inted2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:15:226:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:23:226:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:23:226:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:23:226:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:23:226:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:23:226:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:37 | this.props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:37 | this.props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:37 | this.props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:37 | this.props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:37 | this.props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:28:226:46 | this.props.tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:33:226:37 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:33:226:37 | props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:33:226:37 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:33:226:37 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:33:226:37 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:226:39:226:46 | tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:226:39:226:46 | tainted2 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:226:39:226:46 | tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:226:39:226:46 | tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:226:39:226:46 | tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | $('myId ... inted3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | $('myId ... inted3) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | $('myId ... inted3) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | $('myId ... inted3) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | $('myId ... inted3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | exceptional return of $('myId ... inted3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | exceptional return of $('myId ... inted3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | exceptional return of $('myId ... inted3) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | exceptional return of $('myId ... inted3) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:13:227:47 | exceptional return of $('myId ... inted3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:15:227:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:23:227:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:23:227:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:23:227:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:23:227:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:23:227:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:37 | this.props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:37 | this.props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:37 | this.props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:37 | this.props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:37 | this.props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:28:227:46 | this.props.tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:33:227:37 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:33:227:37 | props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:33:227:37 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:33:227:37 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:33:227:37 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:227:39:227:46 | tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:227:39:227:46 | tainted3 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:227:39:227:46 | tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:227:39:227:46 | tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:227:39:227:46 | tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:13 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:13 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:13 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:13 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:13 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | $('myId') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:21 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:26 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:26 | $('myId').html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:26 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:26 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:26 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | $('myId ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | $('myId ... ainted) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | $('myId ... ainted) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | $('myId ... ainted) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | $('myId ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | exceptional return of $('myId ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | exceptional return of $('myId ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | exceptional return of $('myId ... ainted) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | exceptional return of $('myId ... ainted) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:13:228:49 | exceptional return of $('myId ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:15:228:20 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:23:228:26 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:23:228:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:23:228:26 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:23:228:26 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:23:228:26 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:31 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:31 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:31 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:31 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:31 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:37 | this.props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:37 | this.props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:37 | this.props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:37 | this.props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:37 | this.props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:28:228:48 | this.pr ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:33:228:37 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:33:228:37 | props | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:33:228:37 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:33:228:37 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:33:228:37 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:228:39:228:48 | notTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:228:39:228:48 | notTainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:228:39:228:48 | notTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:228:39:228:48 | notTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:228:39:228:48 | notTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:16 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:25 | this.setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:25 | this.setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:25 | this.setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:25 | this.setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:230:25 | this.setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | exceptional return of this.se ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | exceptional return of this.se ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | exceptional return of this.se ...      }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | exceptional return of this.se ...      }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | exceptional return of this.se ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | this.se ...      }) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | this.se ...      }) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | this.se ...      }) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | this.se ...      }) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:13:232:14 | this.se ...      }) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:18:230:25 | setState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:18:230:25 | setState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:230:18:230:25 | setState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:18:230:25 | setState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:18:230:25 | setState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | 'arguments' object of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | 'arguments' object of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | CalleeFlexibleAccessPath | this.setState |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | (prevSt ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | exceptional return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | exceptional return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | return of anonymous function | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | return of anonymous function | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:27:232:13 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:28:230:36 | prevState | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:28:230:36 | prevState | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:230:28:230:36 | prevState | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:28:230:36 | prevState | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:28:230:36 | prevState | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:230:39:230:47 | prevProps | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:17 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:17 | $ | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:17 | $ | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:17 | $ | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:17 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | $('myId') | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | exceptional return of $('myId') | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | exceptional return of $('myId') | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:25 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:30 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:30 | $('myId').html | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:30 | $('myId').html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:30 | $('myId').html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:30 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | $('myId ... inted4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | $('myId ... inted4) | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | $('myId ... inted4) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | $('myId ... inted4) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | $('myId ... inted4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | exceptional return of $('myId ... inted4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | exceptional return of $('myId ... inted4) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | exceptional return of $('myId ... inted4) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | exceptional return of $('myId ... inted4) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:17:231:50 | exceptional return of $('myId ... inted4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:19:231:24 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:27:231:30 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:27:231:30 | html | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:27:231:30 | html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:27:231:30 | html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:27:231:30 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:40 | prevProps | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:40 | prevProps | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:40 | prevProps | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:40 | prevProps | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:40 | prevProps | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:32:231:49 | prevProps.tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:231:42:231:49 | tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:231:42:231:49 | tainted4 | contextSurroundingFunctionParameters | ()\n()\n(prevState, prevProps) |
| autogenerated/Xss/DomBasedXss/tst.js:231:42:231:49 | tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:231:42:231:49 | tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:231:42:231:49 | tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:6 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:6 | C2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:6 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:6 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:6 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:19 | C2.defaultProps | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:19 | C2.defaultProps | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:19 | C2.defaultProps | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:19 | C2.defaultProps | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:19 | C2.defaultProps | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:43 | C2.defa ... inted } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:43 | C2.defa ... inted } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:43 | C2.defa ... inted } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:43 | C2.defa ... inted } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:5:236:43 | C2.defa ... inted } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:8:236:19 | defaultProps | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:8:236:19 | defaultProps | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:8:236:19 | defaultProps | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:8:236:19 | defaultProps | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:8:236:19 | defaultProps | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | assignedToPropName | defaultProps |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:23:236:43 | { taint ... inted } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:32 | tainted1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:32 | tainted1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:32 | tainted1 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:32 | tainted1 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:32 | tainted1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:25:236:41 | tainted1: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | assignedToPropName | tainted1 |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:236:35:236:41 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:5:238:30 | (<C2 ta ... ted}/>) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:5:238:30 | (<C2 ta ... ted}/>) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:238:5:238:30 | (<C2 ta ... ted}/>) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:5:238:30 | (<C2 ta ... ted}/>) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:5:238:30 | (<C2 ta ... ted}/>) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:6:238:29 | <C2 tai ... nted}/> | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:6:238:29 | <C2 tai ... nted}/> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:238:6:238:29 | <C2 tai ... nted}/> | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:6:238:29 | <C2 tai ... nted}/> | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:6:238:29 | <C2 tai ... nted}/> | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:7:238:8 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:7:238:8 | C2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:238:7:238:8 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:7:238:8 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:7:238:8 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:17 | tainted2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:17 | tainted2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:17 | tainted2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:17 | tainted2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:17 | tainted2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:10:238:27 | tainted2={tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | assignedToPropName | tainted2 |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:238:20:238:26 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | exceptional return of new C2( ... inted}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | exceptional return of new C2( ... inted}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | exceptional return of new C2( ... inted}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | exceptional return of new C2( ... inted}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | exceptional return of new C2( ... inted}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | new C2( ... inted}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | new C2( ... inted}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | new C2( ... inted}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | new C2( ... inted}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:5:240:31 | new C2( ... inted}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:9:240:10 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:9:240:10 | C2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:240:9:240:10 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:9:240:10 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:9:240:10 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | CalleeFlexibleAccessPath | C2 |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:12:240:30 | {tainted3: tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:20 | tainted3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:20 | tainted3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:20 | tainted3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:20 | tainted3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:20 | tainted3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:13:240:29 | tainted3: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | CalleeFlexibleAccessPath | C2 |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | InputAccessPathFromCallee | ?.tainted3 |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | assignedToPropName | tainted3 |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:240:23:240:29 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | exceptional return of new C2( ... inted}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | exceptional return of new C2( ... inted}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | exceptional return of new C2( ... inted}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | exceptional return of new C2( ... inted}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | exceptional return of new C2( ... inted}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | new C2( ... inted}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | new C2( ... inted}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | new C2( ... inted}) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | new C2( ... inted}) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:5:241:31 | new C2( ... inted}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:9:241:10 | C2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:9:241:10 | C2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:241:9:241:10 | C2 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:9:241:10 | C2 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:9:241:10 | C2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | CalleeFlexibleAccessPath | C2 |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:12:241:30 | {tainted4: tainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:20 | tainted4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:20 | tainted4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:20 | tainted4 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:20 | tainted4 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:20 | tainted4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:13:241:29 | tainted4: tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | CalleeFlexibleAccessPath | C2 |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | InputAccessPathFromCallee | ?.tainted4 |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | assignedToPropName | tainted4 |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:241:23:241:29 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | class C ... }\\n    } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | class C ... }\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | class C ... }\\n    } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | class C ... }\\n    } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:5:253:5 | class C ... }\\n    } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:11:244:12 | C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:11:244:12 | C3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:244:11:244:12 | C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:11:244:12 | C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:11:244:12 | C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:26 | React | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:26 | React | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:26 | React | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:26 | React | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:26 | React | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:36 | React.Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:36 | React.Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:36 | React.Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:36 | React.Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:22:244:36 | React.Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:244:28:244:36 | Component | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:244:28:244:36 | Component | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:244:28:244:36 | Component | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:244:28:244:36 | Component | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:244:28:244:36 | Component | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:245:19 | constructor | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:245:19 | constructor | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:245:19 | constructor | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:245:19 | constructor | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:245:19 | constructor | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:9:248:9 | constru ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:245:19 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:245:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:245:19 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:245:19 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:245:19 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | 'arguments' object of constructor of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | 'arguments' object of constructor of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | 'arguments' object of constructor of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | 'arguments' object of constructor of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | 'arguments' object of constructor of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | assignedToPropName | constructor |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | (props) ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | exceptional return of constructor of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | exceptional return of constructor of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | exceptional return of constructor of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | exceptional return of constructor of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | exceptional return of constructor of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | return of constructor of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | return of constructor of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | return of constructor of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | return of constructor of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:20:248:9 | return of constructor of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:245:21:245:25 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:17 | super | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:17 | super | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:17 | super | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:17 | super | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:17 | super | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | exceptional return of super(props) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | exceptional return of super(props) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | exceptional return of super(props) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | exceptional return of super(props) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | exceptional return of super(props) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | super(props) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | super(props) | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | super(props) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | super(props) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:246:13:246:24 | super(props) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | CalleeFlexibleAccessPath | super |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | calleeImports |  |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:246:19:246:23 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:16 | this | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:16 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:16 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:22 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:22 | this.state | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:22 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:22 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:22 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:35 | this.st ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:35 | this.st ... Tainted | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:35 | this.st ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:35 | this.st ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:35 | this.st ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:55 | this.st ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:55 | this.st ... Tainted | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:55 | this.st ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:55 | this.st ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:13:247:55 | this.st ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:18:247:22 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:18:247:22 | state | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:18:247:22 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:18:247:22 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:18:247:22 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:24:247:35 | stateTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:24:247:35 | stateTainted | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:24:247:35 | stateTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:24:247:35 | stateTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:24:247:35 | stateTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:43 | props | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:43 | props | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:43 | props | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:43 | props | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:43 | props | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | assignedToPropName | stateTainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:39:247:55 | props.propTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:247:45:247:55 | propTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:247:45:247:55 | propTainted | contextSurroundingFunctionParameters | ()\n(props) |
| autogenerated/Xss/DomBasedXss/tst.js:247:45:247:55 | propTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:247:45:247:55 | propTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:247:45:247:55 | propTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:250:14 | render | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:250:14 | render | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:250:14 | render | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:250:14 | render | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:250:14 | render | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:9:252:9 | render( ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:250:14 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:250:14 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:250:14 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:250:14 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:250:14 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | 'arguments' object of method render of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | 'arguments' object of method render of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | 'arguments' object of method render of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | 'arguments' object of method render of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | 'arguments' object of method render of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | assignedToPropName | render |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | () {\\n   ...       } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | exceptional return of method render of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | exceptional return of method render of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | exceptional return of method render of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | exceptional return of method render of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | exceptional return of method render of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | return of method render of class C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | return of method render of class C3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | return of method render of class C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | return of method render of class C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:250:15:252:9 | return of method render of class C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:20:251:86 | <span d ... ted}}/> | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:20:251:86 | <span d ... ted}}/> | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:20:251:86 | <span d ... ted}}/> | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:20:251:86 | <span d ... ted}}/> | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:20:251:86 | <span d ... ted}}/> | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:21:251:24 | span | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:21:251:24 | span | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:21:251:24 | span | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:21:251:24 | span | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:21:251:24 | span | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:48 | dangero ... nerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:48 | dangero ... nerHTML | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:48 | dangero ... nerHTML | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:48 | dangero ... nerHTML | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:48 | dangero ... nerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:26:251:84 | dangero ... inted}} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | assignedToPropName | dangerouslySetInnerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:51:251:83 | {__html ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:57 | __html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:57 | __html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:57 | __html | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:57 | __html | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:57 | __html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:52:251:82 | __html: ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:63 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:63 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:63 | this | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:63 | this | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:63 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:69 | this.state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:69 | this.state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:69 | this.state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:69 | this.state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:69 | this.state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | assignedToPropName | __html |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:60:251:82 | this.st ... Tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:65:251:69 | state | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:65:251:69 | state | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:65:251:69 | state | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:65:251:69 | state | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:65:251:69 | state | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:251:71:251:82 | stateTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:251:71:251:82 | stateTainted | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:251:71:251:82 | stateTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:251:71:251:82 | stateTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:251:71:251:82 | stateTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:5:255:33 | (<C3 pr ... ted}/>) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:5:255:33 | (<C3 pr ... ted}/>) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:255:5:255:33 | (<C3 pr ... ted}/>) | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:5:255:33 | (<C3 pr ... ted}/>) | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:5:255:33 | (<C3 pr ... ted}/>) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:6:255:32 | <C3 pro ... nted}/> | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:6:255:32 | <C3 pro ... nted}/> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:255:6:255:32 | <C3 pro ... nted}/> | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:6:255:32 | <C3 pro ... nted}/> | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:6:255:32 | <C3 pro ... nted}/> | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:7:255:8 | C3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:7:255:8 | C3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:255:7:255:8 | C3 | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:7:255:8 | C3 | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:7:255:8 | C3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:20 | propTainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:20 | propTainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:20 | propTainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:20 | propTainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:20 | propTainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:10:255:30 | propTai ... ainted} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | assignedToPropName | propTainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | enclosingFunctionBody | tainted document location search React createElement div dangerouslySetInnerHTML __html tainted React createFactory div dangerouslySetInnerHTML __html tainted C1 React Component constructor state tainted1 tainted state notTainted dbLookup setState tainted2 tainted state tainted3 tainted state tainted4 tainted test $ myId html state tainted1 $ myId html state tainted2 $ myId html state tainted3 $ myId html state notTainted setState prevState $ myId html prevState tainted4 C2 React Component args constructor test $ myId html props tainted1 $ myId html props tainted2 $ myId html props tainted3 $ myId html props notTainted setState prevState prevProps $ myId html prevProps tainted4 C2 defaultProps tainted1 tainted C2 tainted2 tainted C2 tainted3 tainted C2 tainted4 tainted C3 React Component constructor props props state stateTainted props propTainted render span dangerouslySetInnerHTML __html state stateTainted C3 propTainted tainted |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | enclosingFunctionName | react |
| autogenerated/Xss/DomBasedXss/tst.js:255:23:255:29 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:258:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:258:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:258:0 | this | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:258:0 | this | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:258:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | 'arguments' object of function windowName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | 'arguments' object of function windowName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | 'arguments' object of function windowName | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | 'arguments' object of function windowName | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | 'arguments' object of function windowName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | exceptional return of function windowName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | exceptional return of function windowName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | exceptional return of function windowName | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | exceptional return of function windowName | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | exceptional return of function windowName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | return of function windowName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | return of function windowName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | return of function windowName | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | return of function windowName | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:258:1:261:1 | return of function windowName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:258:10:258:19 | windowName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:258:10:258:19 | windowName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:258:10:258:19 | windowName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:5 | $ | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:5 | $ | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | $(window.name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | $(window.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | $(window.name) | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | $(window.name) | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | $(window.name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | exceptional return of $(window.name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | exceptional return of $(window.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | exceptional return of $(window.name) | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | exceptional return of $(window.name) | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:5:259:18 | exceptional return of $(window.name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:12 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:12 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:12 | window | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:12 | window | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:12 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:7:259:17 | window.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:259:14:259:17 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:259:14:259:17 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:259:14:259:17 | name | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:259:14:259:17 | name | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:259:14:259:17 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:5 | $ | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:5 | $ | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | $(name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | $(name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | $(name) | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | $(name) | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | $(name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | exceptional return of $(name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | exceptional return of $(name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | exceptional return of $(name) | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | exceptional return of $(name) | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:260:5:260:11 | exceptional return of $(name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | enclosingFunctionBody | $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | enclosingFunctionName | windowName |
| autogenerated/Xss/DomBasedXss/tst.js:260:7:260:10 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:262:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:262:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:262:0 | this | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:262:0 | this | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:262:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | 'arguments' object of function windowNameAssigned | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | 'arguments' object of function windowNameAssigned | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | 'arguments' object of function windowNameAssigned | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | 'arguments' object of function windowNameAssigned | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | 'arguments' object of function windowNameAssigned | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | exceptional return of function windowNameAssigned | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | exceptional return of function windowNameAssigned | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | exceptional return of function windowNameAssigned | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | exceptional return of function windowNameAssigned | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | exceptional return of function windowNameAssigned | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | functio ...     }\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | functio ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | functio ...     }\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | return of function windowNameAssigned | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | return of function windowNameAssigned | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | return of function windowNameAssigned | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | return of function windowNameAssigned | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:262:1:267:1 | return of function windowNameAssigned | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:262:10:262:27 | windowNameAssigned | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:262:10:262:27 | windowNameAssigned | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:262:10:262:27 | windowNameAssigned | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:10:263:13 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:10:263:13 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:263:10:263:13 | name | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:10:263:13 | name | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:10:263:13 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:18:263:27 | ['a', 'b'] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:18:263:27 | ['a', 'b'] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:263:18:263:27 | ['a', 'b'] | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:18:263:27 | ['a', 'b'] | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:18:263:27 | ['a', 'b'] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:19:263:21 | 'a' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:263:24:263:26 | 'b' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:9 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:9 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:9 | $ | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:9 | $ | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:9 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | $(window.name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | $(window.name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | $(window.name) | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | $(window.name) | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | $(window.name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | exceptional return of $(window.name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | exceptional return of $(window.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | exceptional return of $(window.name) | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | exceptional return of $(window.name) | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:9:264:22 | exceptional return of $(window.name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:16 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:16 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:16 | window | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:16 | window | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:16 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:11:264:21 | window.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:264:18:264:21 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:264:18:264:21 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:264:18:264:21 | name | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:264:18:264:21 | name | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:264:18:264:21 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:9 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:9 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:9 | $ | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:9 | $ | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:9 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | $(name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | $(name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | $(name) | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | $(name) | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | $(name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | exceptional return of $(name) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | exceptional return of $(name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | exceptional return of $(name) | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | exceptional return of $(name) | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:265:9:265:15 | exceptional return of $(name) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | enclosingFunctionBody | name a b $ window name $ name |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | enclosingFunctionName | windowNameAssigned |
| autogenerated/Xss/DomBasedXss/tst.js:265:11:265:14 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:269:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:269:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:269:0 | this | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:269:0 | this | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:269:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | 'arguments' object of function jqueryLocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | 'arguments' object of function jqueryLocation | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | 'arguments' object of function jqueryLocation | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | 'arguments' object of function jqueryLocation | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | 'arguments' object of function jqueryLocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | exceptional return of function jqueryLocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | exceptional return of function jqueryLocation | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | exceptional return of function jqueryLocation | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | exceptional return of function jqueryLocation | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | exceptional return of function jqueryLocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | return of function jqueryLocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | return of function jqueryLocation | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | return of function jqueryLocation | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | return of function jqueryLocation | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:269:1:281:1 | return of function jqueryLocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:269:10:269:23 | jqueryLocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:269:10:269:23 | jqueryLocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:269:10:269:23 | jqueryLocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | $(location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | $(location) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | $(location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | $(location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | $(location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | exceptional return of $(location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | exceptional return of $(location) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | exceptional return of $(location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | exceptional return of $(location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:270:5:270:15 | exceptional return of $(location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:270:7:270:14 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | $(window.location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | $(window.location) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | $(window.location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | $(window.location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | $(window.location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | exceptional return of $(window.location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | exceptional return of $(window.location) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | exceptional return of $(window.location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | exceptional return of $(window.location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:5:271:22 | exceptional return of $(window.location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:12 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:12 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:12 | window | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:12 | window | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:12 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:7:271:21 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:271:14:271:21 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:271:14:271:21 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:271:14:271:21 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:271:14:271:21 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:271:14:271:21 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | $(document.location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | $(document.location) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | $(document.location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | $(document.location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | $(document.location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | exceptional return of $(document.location) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | exceptional return of $(document.location) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | exceptional return of $(document.location) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | exceptional return of $(document.location) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:5:272:24 | exceptional return of $(document.location) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:14 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:14 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:14 | document | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:14 | document | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:14 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:7:272:23 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:272:16:272:23 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:272:16:272:23 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:272:16:272:23 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:272:16:272:23 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:272:16:272:23 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:12 | loc1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:12 | loc1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:12 | loc1 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:12 | loc1 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:12 | loc1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 = location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 = location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 = location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 = location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:273:9:273:23 | loc1 = location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:273:16:273:23 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:273:16:273:23 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:273:16:273:23 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:273:16:273:23 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:273:16:273:23 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:12 | loc2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:12 | loc2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:12 | loc2 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:12 | loc2 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:12 | loc2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 =  ... ocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 =  ... ocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 =  ... ocation | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 =  ... ocation | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:9:274:30 | loc2 =  ... ocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:21 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:21 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:21 | window | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:21 | window | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:21 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:30 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:30 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:30 | window.location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:30 | window.location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:16:274:30 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:274:23:274:30 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:274:23:274:30 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:274:23:274:30 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:274:23:274:30 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:274:23:274:30 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:12 | loc3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:12 | loc3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:12 | loc3 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:12 | loc3 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:12 | loc3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 =  ... ocation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 =  ... ocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 =  ... ocation | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 =  ... ocation | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:9:275:32 | loc3 =  ... ocation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:23 | document | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:23 | document | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:32 | document.location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:32 | document.location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:16:275:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:275:25:275:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:275:25:275:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:275:25:275:32 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:275:25:275:32 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:275:25:275:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | $(loc1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | $(loc1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | $(loc1) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | $(loc1) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | $(loc1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | exceptional return of $(loc1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | exceptional return of $(loc1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | exceptional return of $(loc1) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | exceptional return of $(loc1) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:276:5:276:11 | exceptional return of $(loc1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:276:7:276:10 | loc1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | $(loc2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | $(loc2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | $(loc2) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | $(loc2) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | $(loc2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | exceptional return of $(loc2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | exceptional return of $(loc2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | exceptional return of $(loc2) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | exceptional return of $(loc2) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:277:5:277:11 | exceptional return of $(loc2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:277:7:277:10 | loc2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | $(loc3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | $(loc3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | $(loc3) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | $(loc3) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | $(loc3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | exceptional return of $(loc3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | exceptional return of $(loc3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | exceptional return of $(loc3) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | exceptional return of $(loc3) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:278:5:278:11 | exceptional return of $(loc3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:278:7:278:10 | loc3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:5 | $ | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:5 | $ | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | $("body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | $("body") | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | $("body") | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | exceptional return of $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | exceptional return of $("body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | exceptional return of $("body") | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | exceptional return of $("body") | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:13 | exceptional return of $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:20 | $("body").append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:20 | $("body").append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:20 | $("body").append | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:20 | $("body").append | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:20 | $("body").append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | $("body ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | $("body ... cation) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | $("body ... cation) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | $("body ... cation) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | $("body ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | exceptional return of $("body ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | exceptional return of $("body ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | exceptional return of $("body ... cation) | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | exceptional return of $("body ... cation) | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:5:280:30 | exceptional return of $("body ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:7:280:12 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:15:280:20 | append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:15:280:20 | append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:15:280:20 | append | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:15:280:20 | append | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:15:280:20 | append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | CalleeFlexibleAccessPath | $().append |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | enclosingFunctionBody | $ location $ window location $ document location loc1 location loc2 window location loc3 document location $ loc1 $ loc2 $ loc3 $ body append location |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | enclosingFunctionName | jqueryLocation |
| autogenerated/Xss/DomBasedXss/tst.js:280:22:280:29 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:284:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:284:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:284:0 | this | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:284:0 | this | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:284:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | 'arguments' object of function testCreateContextualFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | 'arguments' object of function testCreateContextualFragment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | 'arguments' object of function testCreateContextualFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | 'arguments' object of function testCreateContextualFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | 'arguments' object of function testCreateContextualFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | exceptional return of function testCreateContextualFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | exceptional return of function testCreateContextualFragment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | exceptional return of function testCreateContextualFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | exceptional return of function testCreateContextualFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | exceptional return of function testCreateContextualFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | functio ... ent);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | functio ... ent);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | functio ... ent);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | return of function testCreateContextualFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | return of function testCreateContextualFragment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | return of function testCreateContextualFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | return of function testCreateContextualFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:284:1:290:1 | return of function testCreateContextualFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:284:10:284:37 | testCre ... ragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:284:10:284:37 | testCre ... ragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:284:10:284:37 | testCre ... ragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:15 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:15 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:15 | tainted | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:15 | tainted | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:15 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted ... ow.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted ... ow.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted ... ow.name | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted ... ow.name | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:9:285:29 | tainted ... ow.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:24 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:24 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:24 | window | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:24 | window | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:24 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:29 | window.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:29 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:29 | window.name | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:29 | window.name | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:19:285:29 | window.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:285:26:285:29 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:285:26:285:29 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:285:26:285:29 | name | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:26:285:29 | name | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:285:26:285:29 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:13 | range | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:13 | range | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:13 | range | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:13 | range | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:13 | range | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range = ... Range() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range = ... Range() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range = ... Range() | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range = ... Range() | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:9:286:38 | range = ... Range() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:24 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:24 | document | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:24 | document | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:24 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:36 | document.createRange | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:36 | document.createRange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:36 | document.createRange | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:36 | document.createRange | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:36 | document.createRange | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | documen ... Range() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | documen ... Range() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | documen ... Range() | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | documen ... Range() | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | documen ... Range() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | exceptional return of documen ... Range() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | exceptional return of documen ... Range() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | exceptional return of documen ... Range() | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | exceptional return of documen ... Range() | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:17:286:38 | exceptional return of documen ... Range() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:286:26:286:36 | createRange | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:286:26:286:36 | createRange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:286:26:286:36 | createRange | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:26:286:36 | createRange | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:286:26:286:36 | createRange | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:9 | range | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:9 | range | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:9 | range | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:9 | range | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:9 | range | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:20 | range.selectNode | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:20 | range.selectNode | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:20 | range.selectNode | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:20 | range.selectNode | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:20 | range.selectNode | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | exceptional return of range.s ... tem(0)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | exceptional return of range.s ... tem(0)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | exceptional return of range.s ... tem(0)) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | exceptional return of range.s ... tem(0)) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | exceptional return of range.s ... tem(0)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | range.s ... tem(0)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | range.s ... tem(0)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | range.s ... tem(0)) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | range.s ... tem(0)) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:5:287:66 | range.s ... tem(0)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:11:287:20 | selectNode | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:11:287:20 | selectNode | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:11:287:20 | selectNode | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:11:287:20 | selectNode | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:11:287:20 | selectNode | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:29 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:29 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:29 | document | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:29 | document | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:29 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:50 | documen ... TagName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:50 | documen ... TagName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:50 | documen ... TagName | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:50 | documen ... TagName | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:50 | documen ... TagName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | documen ... ("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | documen ... ("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | documen ... ("div") | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | documen ... ("div") | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | documen ... ("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | exceptional return of documen ... ("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | exceptional return of documen ... ("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | exceptional return of documen ... ("div") | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | exceptional return of documen ... ("div") | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:57 | exceptional return of documen ... ("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:62 | documen ... ").item | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:62 | documen ... ").item | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:62 | documen ... ").item | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:62 | documen ... ").item | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:62 | documen ... ").item | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | CalleeFlexibleAccessPath | range.selectNode |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | documen ... item(0) | receiverName | range |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | exceptional return of documen ... item(0) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | exceptional return of documen ... item(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | exceptional return of documen ... item(0) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | exceptional return of documen ... item(0) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:22:287:65 | exceptional return of documen ... item(0) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:31:287:50 | getElementsByTagName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:31:287:50 | getElementsByTagName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:31:287:50 | getElementsByTagName | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:31:287:50 | getElementsByTagName | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:31:287:50 | getElementsByTagName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | CalleeFlexibleAccessPath | document.getElementsByTagName |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:52:287:56 | "div" | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:287:59:287:62 | item | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:59:287:62 | item | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:59:287:62 | item | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:59:287:62 | item | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:59:287:62 | item | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | CalleeFlexibleAccessPath | document.getElementsByTagName().item |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:287:64:287:64 | 0 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:24 | documentFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:24 | documentFragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:24 | documentFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:24 | documentFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:24 | documentFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documen ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documen ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documen ... ainted) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documen ... ainted) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documen ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documentFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documentFragment | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documentFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documentFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:9:288:66 | documentFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:32 | range | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:32 | range | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:32 | range | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:32 | range | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:32 | range | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:57 | range.c ... ragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:57 | range.c ... ragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:57 | range.c ... ragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:57 | range.c ... ragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:57 | range.c ... ragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | exceptional return of range.c ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | exceptional return of range.c ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | exceptional return of range.c ... ainted) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | exceptional return of range.c ... ainted) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | exceptional return of range.c ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | range.c ... ainted) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | range.c ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | range.c ... ainted) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | range.c ... ainted) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:28:288:66 | range.c ... ainted) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:34:288:57 | createC ... ragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:34:288:57 | createC ... ragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:34:288:57 | createC ... ragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:34:288:57 | createC ... ragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:34:288:57 | createC ... ragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | CalleeFlexibleAccessPath | range.createContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:288:59:288:65 | tainted | receiverName | range |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:12 | document | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:12 | document | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:17 | document.body | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:17 | document.body | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:17 | document.body | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:17 | document.body | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:29 | documen ... ndChild | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:29 | documen ... ndChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:29 | documen ... ndChild | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:29 | documen ... ndChild | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:29 | documen ... ndChild | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | documen ... agment) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | documen ... agment) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | documen ... agment) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | documen ... agment) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | documen ... agment) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | exceptional return of documen ... agment) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | exceptional return of documen ... agment) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | exceptional return of documen ... agment) | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | exceptional return of documen ... agment) | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:5:289:47 | exceptional return of documen ... agment) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:14:289:17 | body | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:14:289:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:14:289:17 | body | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:14:289:17 | body | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:14:289:17 | body | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:19:289:29 | appendChild | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:19:289:29 | appendChild | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:19:289:29 | appendChild | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:19:289:29 | appendChild | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:19:289:29 | appendChild | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | CalleeFlexibleAccessPath | document.body.appendChild |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | enclosingFunctionBody | tainted window name range document createRange range selectNode document getElementsByTagName div item 0 documentFragment range createContextualFragment tainted document body appendChild documentFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | enclosingFunctionName | testCreateContextualFragment |
| autogenerated/Xss/DomBasedXss/tst.js:289:31:289:46 | documentFragment | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:292:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:292:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:292:0 | this | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:292:0 | this | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:292:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | 'arguments' object of function flowThroughPropertyNames | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | 'arguments' object of function flowThroughPropertyNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | 'arguments' object of function flowThroughPropertyNames | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | 'arguments' object of function flowThroughPropertyNames | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | 'arguments' object of function flowThroughPropertyNames | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | exceptional return of function flowThroughPropertyNames | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | exceptional return of function flowThroughPropertyNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | exceptional return of function flowThroughPropertyNames | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | exceptional return of function flowThroughPropertyNames | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | exceptional return of function flowThroughPropertyNames | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | functio ... // OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | functio ... // OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | return of function flowThroughPropertyNames | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | return of function flowThroughPropertyNames | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | return of function flowThroughPropertyNames | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | return of function flowThroughPropertyNames | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:292:1:297:1 | return of function flowThroughPropertyNames | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:292:10:292:33 | flowThr ... tyNames | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:292:10:292:33 | flowThr ... tyNames | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:292:10:292:33 | flowThr ... tyNames | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:11 | obj | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:11 | obj | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:11 | obj | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:11 | obj | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:11 | obj | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj = {} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj = {} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj = {} | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj = {} | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:293:9:293:16 | obj = {} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:293:15:293:16 | {} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:293:15:293:16 | {} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:293:15:293:16 | {} | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:293:15:293:16 | {} | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:293:15:293:16 | {} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:7 | obj | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:7 | obj | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:7 | obj | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:7 | obj | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:7 | obj | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:22 | obj[Math.random()] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:22 | obj[Math.random()] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:22 | obj[Math.random()] | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:22 | obj[Math.random()] | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:22 | obj[Math.random()] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:36 | obj[Mat ... ow.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:36 | obj[Mat ... ow.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:36 | obj[Mat ... ow.name | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:36 | obj[Mat ... ow.name | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:5:294:36 | obj[Mat ... ow.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:12 | Math | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:12 | Math | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:12 | Math | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:12 | Math | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:12 | Math | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:19 | Math.random | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:19 | Math.random | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:19 | Math.random | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:19 | Math.random | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:19 | Math.random | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | Math.random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | Math.random() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | Math.random() | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | Math.random() | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | Math.random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | exceptional return of Math.random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | exceptional return of Math.random() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | exceptional return of Math.random() | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | exceptional return of Math.random() | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:9:294:21 | exceptional return of Math.random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:14:294:19 | random | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:14:294:19 | random | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:14:294:19 | random | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:14:294:19 | random | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:14:294:19 | random | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:31 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:31 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:31 | window | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:31 | window | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:31 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:36 | window.name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:36 | window.name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:36 | window.name | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:36 | window.name | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:26:294:36 | window.name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:294:33:294:36 | name | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:294:33:294:36 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:294:33:294:36 | name | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:294:33:294:36 | name | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:294:33:294:36 | name | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:295:14:295:14 | p | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:295:19:295:21 | obj | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:295:19:295:21 | obj | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:295:19:295:21 | obj | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:295:19:295:21 | obj | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:295:19:295:21 | obj | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:7 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:7 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:7 | $ | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:7 | $ | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:7 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | $(p) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | $(p) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | $(p) | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | $(p) | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | $(p) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | exceptional return of $(p) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | exceptional return of $(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | exceptional return of $(p) | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | exceptional return of $(p) | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:296:7:296:10 | exceptional return of $(p) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | enclosingFunctionBody | obj obj Math random window name p obj $ p |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | enclosingFunctionName | flowThroughPropertyNames |
| autogenerated/Xss/DomBasedXss/tst.js:296:9:296:9 | p | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:299:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:299:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:299:0 | this | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:299:0 | this | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:299:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | 'arguments' object of function basicExceptions | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | 'arguments' object of function basicExceptions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | 'arguments' object of function basicExceptions | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | 'arguments' object of function basicExceptions | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | 'arguments' object of function basicExceptions | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | exceptional return of function basicExceptions | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | exceptional return of function basicExceptions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | exceptional return of function basicExceptions | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | exceptional return of function basicExceptions | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | exceptional return of function basicExceptions | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | functio ... OK\\n\\t}\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | return of function basicExceptions | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | return of function basicExceptions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | return of function basicExceptions | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | return of function basicExceptions | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:299:1:313:1 | return of function basicExceptions | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:299:10:299:24 | basicExceptions | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:299:10:299:24 | basicExceptions | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:299:10:299:24 | basicExceptions | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:301:9:301:16 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:301:9:301:16 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:301:9:301:16 | location | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:301:9:301:16 | location | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:301:9:301:16 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:302:10:302:10 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:3 | $ | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:3 | $ | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | $("body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | $("body") | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | $("body") | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | exceptional return of $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | exceptional return of $("body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | exceptional return of $("body") | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | exceptional return of $("body") | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:11 | exceptional return of $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:18 | $("body").append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:18 | $("body").append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:18 | $("body").append | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:18 | $("body").append | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:18 | $("body").append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | $("body").append(e) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | $("body").append(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | $("body").append(e) | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | $("body").append(e) | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | $("body").append(e) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | exceptional return of $("body").append(e) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | exceptional return of $("body").append(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | exceptional return of $("body").append(e) | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | exceptional return of $("body").append(e) | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:3:303:21 | exceptional return of $("body").append(e) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:5:303:10 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:13:303:18 | append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:13:303:18 | append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:13:303:18 | append | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:13:303:18 | append | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:13:303:18 | append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | CalleeFlexibleAccessPath | $().append |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:303:20:303:20 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:308:10:308:17 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:308:10:308:17 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:308:10:308:17 | location | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:308:10:308:17 | location | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:308:10:308:17 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:310:10:310:10 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:3 | $ | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:3 | $ | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | $("body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | $("body") | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | $("body") | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | exceptional return of $("body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | exceptional return of $("body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | exceptional return of $("body") | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | exceptional return of $("body") | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:11 | exceptional return of $("body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:18 | $("body").append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:18 | $("body").append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:18 | $("body").append | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:18 | $("body").append | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:18 | $("body").append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | $("body").append(e) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | $("body").append(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | $("body").append(e) | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | $("body").append(e) | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | $("body").append(e) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | exceptional return of $("body").append(e) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | exceptional return of $("body").append(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | exceptional return of $("body").append(e) | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | exceptional return of $("body").append(e) | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:3:311:21 | exceptional return of $("body").append(e) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:5:311:10 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:13:311:18 | append | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:13:311:18 | append | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:13:311:18 | append | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:13:311:18 | append | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:13:311:18 | append | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | CalleeFlexibleAccessPath | $().append |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | enclosingFunctionBody | location e $ body append e location e $ body append e |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | enclosingFunctionName | basicExceptions |
| autogenerated/Xss/DomBasedXss/tst.js:311:20:311:20 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:315:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:315:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:315:0 | this | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:315:0 | this | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:315:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | 'arguments' object of function handlebarsSafeString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | 'arguments' object of function handlebarsSafeString | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | 'arguments' object of function handlebarsSafeString | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | 'arguments' object of function handlebarsSafeString | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | 'arguments' object of function handlebarsSafeString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | exceptional return of function handlebarsSafeString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | exceptional return of function handlebarsSafeString | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | exceptional return of function handlebarsSafeString | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | exceptional return of function handlebarsSafeString | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | exceptional return of function handlebarsSafeString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | functio ...  OK!\\t\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | functio ...  OK!\\t\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | functio ...  OK!\\t\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | return of function handlebarsSafeString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | return of function handlebarsSafeString | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | return of function handlebarsSafeString | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | return of function handlebarsSafeString | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:315:1:317:1 | return of function handlebarsSafeString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:315:10:315:29 | handlebarsSafeString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:315:10:315:29 | handlebarsSafeString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:315:10:315:29 | handlebarsSafeString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | exceptional return of new Han ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | exceptional return of new Han ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | exceptional return of new Han ... cation) | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | exceptional return of new Han ... cation) | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | exceptional return of new Han ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | new Han ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | new Han ... cation) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | new Han ... cation) | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | new Han ... cation) | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:9:316:43 | new Han ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:22 | Handlebars | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:22 | Handlebars | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:22 | Handlebars | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:22 | Handlebars | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:22 | Handlebars | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:33 | Handleb ... eString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:33 | Handleb ... eString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:33 | Handleb ... eString | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:33 | Handleb ... eString | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:13:316:33 | Handleb ... eString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:24:316:33 | SafeString | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:24:316:33 | SafeString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:316:24:316:33 | SafeString | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:24:316:33 | SafeString | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:24:316:33 | SafeString | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | CalleeFlexibleAccessPath | Handlebars.SafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | enclosingFunctionBody | Handlebars SafeString location |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | enclosingFunctionName | handlebarsSafeString |
| autogenerated/Xss/DomBasedXss/tst.js:316:35:316:42 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:319:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:319:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:319:0 | this | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:319:0 | this | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:319:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | 'arguments' object of function test2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | 'arguments' object of function test2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | 'arguments' object of function test2 | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | 'arguments' object of function test2 | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | 'arguments' object of function test2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | exceptional return of function test2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | exceptional return of function test2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | exceptional return of function test2 | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | exceptional return of function test2 | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | exceptional return of function test2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | functio ... ngth)\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | functio ... ngth)\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | functio ... ngth)\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | return of function test2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | return of function test2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | return of function test2 | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | return of function test2 | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:319:1:324:1 | return of function test2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:319:10:319:14 | test2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:319:10:319:14 | test2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:319:10:319:14 | test2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:12 | target | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:12 | target | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target  ... .search | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target  ... .search | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:7:320:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:23 | document | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:23 | document | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:32 | document.location | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:32 | document.location | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:39 | documen ... .search | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:39 | documen ... .search | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:16:320:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:25:320:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:25:320:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:25:320:32 | location | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:25:320:32 | location | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:25:320:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:320:34:320:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:320:34:320:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:320:34:320:39 | search | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:320:34:320:39 | search | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:320:34:320:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:3 | $ | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:3 | $ | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | $('myId') | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | exceptional return of $('myId') | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:16 | $('myId').html | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | $('myId ... length) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | $('myId ... length) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | $('myId ... length) | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | $('myId ... length) | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | $('myId ... length) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | exceptional return of $('myId ... length) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | exceptional return of $('myId ... length) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | exceptional return of $('myId ... length) | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | exceptional return of $('myId ... length) | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:3:323:31 | exceptional return of $('myId ... length) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:5:323:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:13:323:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:13:323:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:13:323:16 | html | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:13:323:16 | html | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:13:323:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:23 | target | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:23 | target | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:18:323:30 | target.length | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:323:25:323:30 | length | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:323:25:323:30 | length | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:323:25:323:30 | length | enclosingFunctionBody | target document location search $ myId html target length |
| autogenerated/Xss/DomBasedXss/tst.js:323:25:323:30 | length | enclosingFunctionName | test2 |
| autogenerated/Xss/DomBasedXss/tst.js:323:25:323:30 | length | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:326:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:326:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:326:0 | this | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:326:0 | this | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:326:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | 'arguments' object of function getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | 'arguments' object of function getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | 'arguments' object of function getTaintedUrl | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | 'arguments' object of function getTaintedUrl | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | 'arguments' object of function getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | exceptional return of function getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | exceptional return of function getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | exceptional return of function getTaintedUrl | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | exceptional return of function getTaintedUrl | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | exceptional return of function getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | functio ... ion);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | functio ... ion);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | functio ... ion);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | return of function getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | return of function getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | return of function getTaintedUrl | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | return of function getTaintedUrl | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:326:1:328:1 | return of function getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:326:10:326:22 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | exceptional return of new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | exceptional return of new URL ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | exceptional return of new URL ... cation) | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | exceptional return of new URL ... cation) | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | exceptional return of new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | new URL ... cation) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | new URL ... cation) | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | new URL ... cation) | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:10:327:35 | new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:14:327:16 | URL | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:14:327:16 | URL | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:327:14:327:16 | URL | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:14:327:16 | URL | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:14:327:16 | URL | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:25 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:25 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:25 | document | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:25 | document | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:25 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | CalleeFlexibleAccessPath | URL |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:18:327:34 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:327:27:327:34 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:327:27:327:34 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:327:27:327:34 | location | enclosingFunctionBody | URL document location |
| autogenerated/Xss/DomBasedXss/tst.js:327:27:327:34 | location | enclosingFunctionName | getTaintedUrl |
| autogenerated/Xss/DomBasedXss/tst.js:327:27:327:34 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | getTaintedUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | getTaintedUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | getTaintedUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | this | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | this | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:330:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | 'arguments' object of function URLPseudoProperties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | 'arguments' object of function URLPseudoProperties | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | 'arguments' object of function URLPseudoProperties | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | 'arguments' object of function URLPseudoProperties | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | 'arguments' object of function URLPseudoProperties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | exceptional return of function URLPseudoProperties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | exceptional return of function URLPseudoProperties | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | exceptional return of function URLPseudoProperties | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | exceptional return of function URLPseudoProperties | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | exceptional return of function URLPseudoProperties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | functio ...  URL)\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | functio ...  URL)\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | functio ...  URL)\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | return of function URLPseudoProperties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | return of function URLPseudoProperties | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | return of function URLPseudoProperties | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | return of function URLPseudoProperties | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:330:1:336:1 | return of function URLPseudoProperties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:330:10:330:28 | URLPseudoProperties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:330:10:330:28 | URLPseudoProperties | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:330:10:330:28 | URLPseudoProperties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:12 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:12 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:12 | params | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:12 | params | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:12 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params  ... hParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params  ... hParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params  ... hParams | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params  ... hParams | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:7:331:43 | params  ... hParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:28 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:28 | getTaintedUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:28 | getTaintedUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:28 | getTaintedUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:28 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | exceptional return of getTaintedUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | exceptional return of getTaintedUrl() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | exceptional return of getTaintedUrl() | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | exceptional return of getTaintedUrl() | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | exceptional return of getTaintedUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | getTaintedUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | getTaintedUrl() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | getTaintedUrl() | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | getTaintedUrl() | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:30 | getTaintedUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:43 | getTain ... hParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:43 | getTain ... hParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:43 | getTain ... hParams | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:43 | getTain ... hParams | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:16:331:43 | getTain ... hParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:331:32:331:43 | searchParams | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:331:32:331:43 | searchParams | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:331:32:331:43 | searchParams | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:331:32:331:43 | searchParams | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:331:32:331:43 | searchParams | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:3 | $ | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:3 | $ | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | $('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | $('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | $('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | exceptional return of $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | exceptional return of $('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | exceptional return of $('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | exceptional return of $('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:11 | exceptional return of $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:16 | $('name').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:16 | $('name').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:16 | $('name').html | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:16 | $('name').html | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:16 | $('name').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | $('name ... name')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | $('name ... name')) | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | $('name ... name')) | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | exceptional return of $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | exceptional return of $('name ... name')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | exceptional return of $('name ... name')) | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | exceptional return of $('name ... name')) | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:3:332:36 | exceptional return of $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:5:332:10 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:13:332:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:13:332:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:13:332:16 | html | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:13:332:16 | html | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:13:332:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:23 | params | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:23 | params | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:23 | params | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:23 | params | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:23 | params | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:27 | params.get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:27 | params.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:27 | params.get | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:27 | params.get | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:27 | params.get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | exceptional return of params.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | exceptional return of params.get('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | exceptional return of params.get('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | exceptional return of params.get('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | exceptional return of params.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:18:332:35 | params.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:25:332:27 | get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:25:332:27 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:25:332:27 | get | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:25:332:27 | get | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:25:332:27 | get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | CalleeFlexibleAccessPath | params.get |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:332:29:332:34 | 'name' | receiverName | params |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:11 | myUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:11 | myUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:11 | myUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:11 | myUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:11 | myUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl = ... edUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl = ... edUrl() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl = ... edUrl() | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl = ... edUrl() | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:7:334:29 | myUrl = ... edUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:27 | getTaintedUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:27 | getTaintedUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:27 | getTaintedUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:27 | getTaintedUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:27 | getTaintedUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | exceptional return of getTaintedUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | exceptional return of getTaintedUrl() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | exceptional return of getTaintedUrl() | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | exceptional return of getTaintedUrl() | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | exceptional return of getTaintedUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | getTaintedUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | getTaintedUrl() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | getTaintedUrl() | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | getTaintedUrl() | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:334:15:334:29 | getTaintedUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:3 | $ | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:3 | $ | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | $('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | $('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | $('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | exceptional return of $('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | exceptional return of $('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | exceptional return of $('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | exceptional return of $('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:11 | exceptional return of $('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:16 | $('name').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:16 | $('name').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:16 | $('name').html | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:16 | $('name').html | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:16 | $('name').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | $('name ... name')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | $('name ... name')) | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | $('name ... name')) | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | exceptional return of $('name ... name')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | exceptional return of $('name ... name')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | exceptional return of $('name ... name')) | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | exceptional return of $('name ... name')) | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:3:335:35 | exceptional return of $('name ... name')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:5:335:10 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:13:335:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:13:335:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:13:335:16 | html | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:13:335:16 | html | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:13:335:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:22 | myUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:22 | myUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:22 | myUrl | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:22 | myUrl | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:22 | myUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:26 | myUrl.get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:26 | myUrl.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:26 | myUrl.get | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:26 | myUrl.get | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:26 | myUrl.get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | exceptional return of myUrl.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | exceptional return of myUrl.get('name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | exceptional return of myUrl.get('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | exceptional return of myUrl.get('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | exceptional return of myUrl.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:18:335:34 | myUrl.get('name') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:24:335:26 | get | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:24:335:26 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:24:335:26 | get | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:24:335:26 | get | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:24:335:26 | get | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | CalleeFlexibleAccessPath | myUrl.get |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | enclosingFunctionBody | params getTaintedUrl searchParams $ name html params get name myUrl getTaintedUrl $ name html myUrl get name |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | enclosingFunctionName | URLPseudoProperties |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:335:28:335:33 | 'name' | receiverName | myUrl |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:339:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:339:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:339:0 | this | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:339:0 | this | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:339:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | 'arguments' object of function hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | 'arguments' object of function hash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | 'arguments' object of function hash | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | 'arguments' object of function hash | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | 'arguments' object of function hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | exceptional return of function hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | exceptional return of function hash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | exceptional return of function hash | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | exceptional return of function hash | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | exceptional return of function hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | functio ... T OK\\n\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | functio ... T OK\\n\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | functio ... T OK\\n\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | return of function hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | return of function hash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | return of function hash | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | return of function hash | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:339:1:345:1 | return of function hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:339:10:339:13 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:339:10:339:13 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:339:10:339:13 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:340:2 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:340:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:340:2 | this | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:340:2 | this | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:340:2 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | 'arguments' object of function getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | 'arguments' object of function getUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | 'arguments' object of function getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | 'arguments' object of function getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | 'arguments' object of function getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | exceptional return of function getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | exceptional return of function getUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | exceptional return of function getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | exceptional return of function getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | exceptional return of function getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | functio ... n);\\n  } | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | functio ... n);\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | functio ... n);\\n  } | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | functio ... n);\\n  } | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | functio ... n);\\n  } | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | return of function getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | return of function getUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | return of function getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | return of function getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:3:342:3 | return of function getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:340:12:340:17 | getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | exceptional return of new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | exceptional return of new URL ... cation) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | exceptional return of new URL ... cation) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | exceptional return of new URL ... cation) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | exceptional return of new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | new URL ... cation) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | new URL ... cation) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | new URL ... cation) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | new URL ... cation) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:12:341:37 | new URL ... cation) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:16:341:18 | URL | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:16:341:18 | URL | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:341:16:341:18 | URL | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:16:341:18 | URL | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:16:341:18 | URL | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:27 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:27 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:27 | document | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:27 | document | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:27 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | CalleeFlexibleAccessPath | URL |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:20:341:36 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:341:29:341:36 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:341:29:341:36 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:341:29:341:36 | location | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:341:29:341:36 | location | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:341:29:341:36 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:3 | $ | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:3 | $ | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | $(getUr ... ing(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | $(getUr ... ing(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | $(getUr ... ing(1)) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | $(getUr ... ing(1)) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | $(getUr ... ing(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | exceptional return of $(getUr ... ing(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | exceptional return of $(getUr ... ing(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | exceptional return of $(getUr ... ing(1)) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | exceptional return of $(getUr ... ing(1)) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:3:343:31 | exceptional return of $(getUr ... ing(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:10 | getUrl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:10 | getUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:10 | getUrl | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:10 | getUrl | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:10 | getUrl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | exceptional return of getUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | exceptional return of getUrl() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | exceptional return of getUrl() | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | exceptional return of getUrl() | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | exceptional return of getUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | getUrl() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | getUrl() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | getUrl() | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | getUrl() | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:12 | getUrl() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:17 | getUrl().hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:17 | getUrl().hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:17 | getUrl().hash | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:17 | getUrl().hash | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:17 | getUrl().hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:27 | getUrl( ... bstring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:27 | getUrl( ... bstring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:27 | getUrl( ... bstring | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:27 | getUrl( ... bstring | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:27 | getUrl( ... bstring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | exceptional return of getUrl( ... ring(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | exceptional return of getUrl( ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | exceptional return of getUrl( ... ring(1) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | exceptional return of getUrl( ... ring(1) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | exceptional return of getUrl( ... ring(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:5:343:30 | getUrl( ... ring(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:14:343:17 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:14:343:17 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:14:343:17 | hash | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:14:343:17 | hash | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:14:343:17 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:19:343:27 | substring | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:19:343:27 | substring | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:19:343:27 | substring | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:19:343:27 | substring | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:19:343:27 | substring | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | CalleeFlexibleAccessPath | getUrl().hash.substring |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | enclosingFunctionBody | getUrl URL document location $ getUrl hash substring 1 |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | enclosingFunctionName | hash |
| autogenerated/Xss/DomBasedXss/tst.js:343:29:343:29 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:347:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:347:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:347:0 | this | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:347:0 | this | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:347:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | 'arguments' object of function growl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | 'arguments' object of function growl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | 'arguments' object of function growl | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | 'arguments' object of function growl | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | 'arguments' object of function growl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | exceptional return of function growl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | exceptional return of function growl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | exceptional return of function growl | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | exceptional return of function growl | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | exceptional return of function growl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | return of function growl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | return of function growl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | return of function growl | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | return of function growl | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:347:1:350:1 | return of function growl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:347:10:347:14 | growl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:347:10:347:14 | growl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:347:10:347:14 | growl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:12 | target | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:12 | target | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target  ... .search | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target  ... .search | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:7:348:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:23 | document | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:23 | document | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:32 | document.location | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:32 | document.location | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:39 | documen ... .search | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:39 | documen ... .search | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:16:348:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:25:348:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:25:348:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:25:348:32 | location | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:25:348:32 | location | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:25:348:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:348:34:348:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:348:34:348:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:348:34:348:39 | search | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:348:34:348:39 | search | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:348:34:348:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:3 | $ | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:3 | $ | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:10 | $.jGrowl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:10 | $.jGrowl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:10 | $.jGrowl | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:10 | $.jGrowl | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:10 | $.jGrowl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | $.jGrowl(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | $.jGrowl(target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | $.jGrowl(target) | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | $.jGrowl(target) | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | $.jGrowl(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | exceptional return of $.jGrowl(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | exceptional return of $.jGrowl(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | exceptional return of $.jGrowl(target) | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | exceptional return of $.jGrowl(target) | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:3:349:18 | exceptional return of $.jGrowl(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:5:349:10 | jGrowl | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:5:349:10 | jGrowl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:349:5:349:10 | jGrowl | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:5:349:10 | jGrowl | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:5:349:10 | jGrowl | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | CalleeFlexibleAccessPath | $.jGrowl |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | enclosingFunctionBody | target document location search $ jGrowl target |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | enclosingFunctionName | growl |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:349:12:349:17 | target | receiverName | $ |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:352:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:352:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:352:0 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:352:0 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:352:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | 'arguments' object of function thisNodes | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | 'arguments' object of function thisNodes | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | 'arguments' object of function thisNodes | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | 'arguments' object of function thisNodes | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | 'arguments' object of function thisNodes | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | exceptional return of function thisNodes | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | exceptional return of function thisNodes | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | exceptional return of function thisNodes | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | exceptional return of function thisNodes | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | exceptional return of function thisNodes | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | functio ... in; \\n\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | functio ... in; \\n\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | functio ... in; \\n\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | return of function thisNodes | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | return of function thisNodes | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | return of function thisNodes | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | return of function thisNodes | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:352:1:368:1 | return of function thisNodes | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:352:10:352:18 | thisNodes | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:352:10:352:18 | thisNodes | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:352:10:352:18 | thisNodes | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:15 | pluginName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:15 | pluginName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:15 | pluginName | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:15 | pluginName | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:15 | pluginName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginN ... Plugin" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginN ... Plugin" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginN ... Plugin" | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginN ... Plugin" | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginN ... Plugin" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginName | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginName | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:353:6:353:39 | pluginName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:353:19:353:39 | "myFanc ... Plugin" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:353:19:353:39 | "myFanc ... Plugin" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:353:19:353:39 | "myFanc ... Plugin" | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:353:19:353:39 | "myFanc ... Plugin" | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:353:19:353:39 | "myFanc ... Plugin" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:354:13 | myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:354:13 | myPlugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:354:13 | myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:354:13 | myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:354:13 | myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugi ... \\t});\\n\\t} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugi ... \\t});\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugi ... \\t});\\n\\t} | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugi ... \\t});\\n\\t} | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugi ... \\t});\\n\\t} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:6:365:2 | myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:16 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:16 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:16 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:16 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:17 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:17 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:17 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:17 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:354:17 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | 'arguments' object of function myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | 'arguments' object of function myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | 'arguments' object of function myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | 'arguments' object of function myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | 'arguments' object of function myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | exceptional return of function myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | exceptional return of function myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | exceptional return of function myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | exceptional return of function myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | exceptional return of function myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | functio ... \\t});\\n\\t} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | functio ... \\t});\\n\\t} | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | functio ... \\t});\\n\\t} | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | functio ... \\t});\\n\\t} | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | functio ... \\t});\\n\\t} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | return of function myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | return of function myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | return of function myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | return of function myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:354:17:365:2 | return of function myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:15 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target  ... .search | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target  ... .search | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target  ... .search | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:10:355:42 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:26 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:26 | document | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:26 | document | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:26 | document | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:26 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:35 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:35 | document.location | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:35 | document.location | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:35 | document.location | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:35 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:42 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:42 | documen ... .search | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:42 | documen ... .search | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:42 | documen ... .search | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:19:355:42 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:28:355:35 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:28:355:35 | location | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:28:355:35 | location | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:28:355:35 | location | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:28:355:35 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:355:37:355:42 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:355:37:355:42 | search | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:355:37:355:42 | search | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:355:37:355:42 | search | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:355:37:355:42 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:9 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:9 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:9 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:9 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:9 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:14 | this.html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:14 | this.html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:14 | this.html | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:14 | this.html | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:14 | this.html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | exceptional return of this.html(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | exceptional return of this.html(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | exceptional return of this.html(target) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | exceptional return of this.html(target) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | exceptional return of this.html(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | this.html(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | this.html(target) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | this.html(target) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | this.html(target) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:6:356:22 | this.html(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:11:356:14 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:11:356:14 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:356:11:356:14 | html | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:11:356:14 | html | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:11:356:14 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | CalleeFlexibleAccessPath | this.html |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:356:16:356:21 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:6 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:6 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:6 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:6 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:6 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:16 | this.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:16 | this.innerHTML | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:16 | this.innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:16 | this.innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:16 | this.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:25 | this.in ...  target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:25 | this.in ...  target | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:25 | this.in ...  target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:25 | this.in ...  target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:357:3:357:25 | this.in ...  target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:357:8:357:16 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:357:8:357:16 | innerHTML | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:357:8:357:16 | innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:357:8:357:16 | innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:357:8:357:16 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:357:20:357:25 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:6 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:6 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:6 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:6 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:6 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:11 | this.each | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:11 | this.each | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:11 | this.each | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:11 | this.each | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:359:11 | this.each | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | exceptional return of this.ea ... K.\\n\\t\\t}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | exceptional return of this.ea ... K.\\n\\t\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | exceptional return of this.ea ... K.\\n\\t\\t}) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | exceptional return of this.ea ... K.\\n\\t\\t}) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | exceptional return of this.ea ... K.\\n\\t\\t}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | this.ea ... K.\\n\\t\\t}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | this.ea ... K.\\n\\t\\t}) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | this.ea ... K.\\n\\t\\t}) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | this.ea ... K.\\n\\t\\t}) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:3:364:4 | this.ea ... K.\\n\\t\\t}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:8:359:11 | each | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:8:359:11 | each | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/tst.js:359:8:359:11 | each | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:8:359:11 | each | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:8:359:11 | each | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:359:12 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | 'arguments' object of anonymous function | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | 'arguments' object of anonymous function | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | 'arguments' object of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | exceptional return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | exceptional return of anonymous function | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | exceptional return of anonymous function | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | exceptional return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | CalleeFlexibleAccessPath | this.each |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | functio ... OK.\\n\\t\\t} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | return of anonymous function | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | return of anonymous function | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | return of anonymous function | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:13:364:3 | return of anonymous function | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:23:359:23 | i | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:23:359:23 | i | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:359:23:359:23 | i | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:23:359:23 | i | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:23:359:23 | i | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:359:26:359:26 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:7 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:7 | this | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:7 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:7 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:7 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:17 | this.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:17 | this.innerHTML | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:17 | this.innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:17 | this.innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:17 | this.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:26 | this.in ...  target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:26 | this.in ...  target | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:26 | this.in ...  target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:26 | this.in ...  target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:360:4:360:26 | this.in ...  target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:360:9:360:17 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:360:9:360:17 | innerHTML | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:360:9:360:17 | innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:360:9:360:17 | innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:360:9:360:17 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:360:21:360:26 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:7 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:7 | this | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:7 | this | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:7 | this | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:7 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:12 | this.html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:12 | this.html | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:12 | this.html | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:12 | this.html | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:12 | this.html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | exceptional return of this.html(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | exceptional return of this.html(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | exceptional return of this.html(target) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | exceptional return of this.html(target) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | exceptional return of this.html(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | this.html(target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | this.html(target) | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | this.html(target) | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | this.html(target) | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:4:361:20 | this.html(target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:9:361:12 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:9:361:12 | html | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:361:9:361:12 | html | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:9:361:12 | html | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:9:361:12 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | CalleeFlexibleAccessPath | this.html |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:361:14:361:19 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:4 | e | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:4 | e | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:4 | e | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:4 | e | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:4 | e | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:14 | e.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:14 | e.innerHTML | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:14 | e.innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:14 | e.innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:14 | e.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:23 | e.innerHTML = target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:23 | e.innerHTML = target | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:23 | e.innerHTML = target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:23 | e.innerHTML = target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:363:4:363:23 | e.innerHTML = target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:363:6:363:14 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:363:6:363:14 | innerHTML | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:363:6:363:14 | innerHTML | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:363:6:363:14 | innerHTML | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:363:6:363:14 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | contextSurroundingFunctionParameters | ()\n()\n(i, e) |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:363:18:363:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:2 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:2 | $ | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:2 | $ | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:2 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:5 | $.fn | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:5 | $.fn | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:5 | $.fn | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:5 | $.fn | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:17 | $.fn[pluginName] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:17 | $.fn[pluginName] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:17 | $.fn[pluginName] | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:17 | $.fn[pluginName] | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:17 | $.fn[pluginName] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:28 | $.fn[pl ... yPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:28 | $.fn[pl ... yPlugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:28 | $.fn[pl ... yPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:28 | $.fn[pl ... yPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:2:366:28 | $.fn[pl ... yPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:4:366:5 | fn | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:4:366:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:4:366:5 | fn | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:4:366:5 | fn | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:4:366:5 | fn | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:7:366:16 | pluginName | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:7:366:16 | pluginName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:7:366:16 | pluginName | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:7:366:16 | pluginName | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:7:366:16 | pluginName | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:366:21:366:28 | myPlugin | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:366:21:366:28 | myPlugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:366:21:366:28 | myPlugin | enclosingFunctionBody | pluginName myFancyJQueryPlugin myPlugin target document location search html target innerHTML target each i e innerHTML target html target e innerHTML target $ fn pluginName myPlugin |
| autogenerated/Xss/DomBasedXss/tst.js:366:21:366:28 | myPlugin | enclosingFunctionName | thisNodes |
| autogenerated/Xss/DomBasedXss/tst.js:366:21:366:28 | myPlugin | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:370:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:370:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:370:0 | this | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:370:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:370:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | 'arguments' object of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | 'arguments' object of function test | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | 'arguments' object of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | exceptional return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | exceptional return of function test | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | exceptional return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | functio ... [0]);\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | functio ... [0]);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | functio ... [0]);\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | return of function test | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:370:1:378:1 | return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:370:10:370:13 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:370:10:370:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:370:10:370:13 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:12 | target | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:12 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target  ... .search | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target  ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:7:371:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:23 | document | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:23 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:32 | document.location | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:32 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:39 | documen ... .search | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:39 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:16:371:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:25:371:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:25:371:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:25:371:32 | location | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:25:371:32 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:25:371:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:371:34:371:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:371:34:371:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:371:34:371:39 | search | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:371:34:371:39 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:371:34:371:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | exceptional return of $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | exceptional return of $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:3:374:24 | exceptional return of $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:5:374:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:13:374:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:13:374:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:13:374:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:13:374:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:13:374:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:374:18:374:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | $('myid') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | $('myid') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | $('myid') | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | $('myid') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | $('myid') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | exceptional return of $('myid') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | exceptional return of $('myid') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | exceptional return of $('myid') | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | exceptional return of $('myid') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:11 | exceptional return of $('myid') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:16 | $('myid').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:16 | $('myid').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:16 | $('myid').html | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:16 | $('myid').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:16 | $('myid').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | $('myid ... ?")[0]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | $('myid ... ?")[0]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | $('myid ... ?")[0]) | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | $('myid ... ?")[0]) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | $('myid ... ?")[0]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | exceptional return of $('myid ... ?")[0]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | exceptional return of $('myid ... ?")[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | exceptional return of $('myid ... ?")[0]) | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | exceptional return of $('myid ... ?")[0]) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:3:377:54 | exceptional return of $('myid ... ?")[0]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:5:377:10 | 'myid' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:13:377:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:13:377:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:13:377:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:13:377:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:13:377:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:25 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:25 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:25 | document | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:25 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:25 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:34 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:34 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:34 | document.location | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:34 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:34 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:39 | documen ... on.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:39 | documen ... on.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:39 | documen ... on.href | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:39 | documen ... on.href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:39 | documen ... on.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:45 | documen ... f.split | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:45 | documen ... f.split | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:45 | documen ... f.split | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:45 | documen ... f.split | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:45 | documen ... f.split | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | documen ... it("?") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | documen ... it("?") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | documen ... it("?") | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | documen ... it("?") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | documen ... it("?") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | exceptional return of documen ... it("?") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | exceptional return of documen ... it("?") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | exceptional return of documen ... it("?") | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | exceptional return of documen ... it("?") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:50 | exceptional return of documen ... it("?") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:18:377:53 | documen ... "?")[0] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:27:377:34 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:27:377:34 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:27:377:34 | location | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:27:377:34 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:27:377:34 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:36:377:39 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:36:377:39 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:36:377:39 | href | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:36:377:39 | href | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:36:377:39 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:41:377:45 | split | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:41:377:45 | split | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:41:377:45 | split | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:41:377:45 | split | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:41:377:45 | split | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | CalleeFlexibleAccessPath | document.location.href.split |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:47:377:49 | "?" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:377:52:377:52 | 0 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:377:52:377:52 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:377:52:377:52 | 0 | enclosingFunctionBody | target document location search $ myId html target $ myid html document 0 location href split ? 0 |
| autogenerated/Xss/DomBasedXss/tst.js:377:52:377:52 | 0 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:377:52:377:52 | 0 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:380:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:380:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:380:0 | this | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:380:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:380:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | 'arguments' object of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | 'arguments' object of function test | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | 'arguments' object of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | exceptional return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | exceptional return of function test | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | exceptional return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | functio ... // OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | functio ... // OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | return of function test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | return of function test | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:380:1:413:1 | return of function test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:380:10:380:13 | test | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:380:10:380:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:380:10:380:13 | test | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:12 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:12 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target  ... .search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target  ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:7:381:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:23 | document | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:23 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:32 | document.location | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:32 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:39 | documen ... .search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:39 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:16:381:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:25:381:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:25:381:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:25:381:32 | location | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:25:381:32 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:25:381:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:381:34:381:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:381:34:381:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:381:34:381:39 | search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:381:34:381:39 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:381:34:381:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | $('myId ... target) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | exceptional return of $('myId ... target) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | exceptional return of $('myId ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | exceptional return of $('myId ... target) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | exceptional return of $('myId ... target) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:3:384:24 | exceptional return of $('myId ... target) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:5:384:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:13:384:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:13:384:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:13:384:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:13:384:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:13:384:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:384:18:384:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | $('myId ... .taint) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | $('myId ... .taint) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | $('myId ... .taint) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | $('myId ... .taint) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | $('myId ... .taint) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | exceptional return of $('myId ... .taint) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | exceptional return of $('myId ... .taint) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | exceptional return of $('myId ... .taint) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | exceptional return of $('myId ... .taint) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:3:386:30 | exceptional return of $('myId ... .taint) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:5:386:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:13:386:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:13:386:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:13:386:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:13:386:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:13:386:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:18:386:29 | target.taint | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:386:25:386:29 | taint | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:386:25:386:29 | taint | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:386:25:386:29 | taint | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:386:25:386:29 | taint | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:386:25:386:29 | taint | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:15 | target.taint2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:15 | target.taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:15 | target.taint2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:15 | target.taint2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:15 | target.taint2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:19 | target.taint2 = 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:19 | target.taint2 = 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:19 | target.taint2 = 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:19 | target.taint2 = 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:388:3:388:19 | target.taint2 = 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:388:10:388:15 | taint2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:388:10:388:15 | taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:388:10:388:15 | taint2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:388:10:388:15 | taint2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:388:10:388:15 | taint2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | assignedToPropName | taint2 |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:388:19:388:19 | 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | $('myId ... taint2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | $('myId ... taint2) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | $('myId ... taint2) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | $('myId ... taint2) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | $('myId ... taint2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | exceptional return of $('myId ... taint2) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | exceptional return of $('myId ... taint2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | exceptional return of $('myId ... taint2) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | exceptional return of $('myId ... taint2) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:3:389:31 | exceptional return of $('myId ... taint2) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:5:389:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:13:389:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:13:389:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:13:389:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:13:389:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:13:389:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:18:389:30 | target.taint2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:389:25:389:30 | taint2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:389:25:389:30 | taint2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:389:25:389:30 | taint2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:389:25:389:30 | taint2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:389:25:389:30 | taint2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:15 | target.taint3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:15 | target.taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:15 | target.taint3 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:15 | target.taint3 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:15 | target.taint3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:42 | target. ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:42 | target. ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:42 | target. ... .search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:42 | target. ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:3:391:42 | target. ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:10:391:15 | taint3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:10:391:15 | taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:10:391:15 | taint3 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:10:391:15 | taint3 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:10:391:15 | taint3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:26 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:26 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:26 | document | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:26 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:26 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:35 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:35 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:35 | document.location | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:35 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:35 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | assignedToPropName | taint3 |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:19:391:42 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:28:391:35 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:28:391:35 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:28:391:35 | location | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:28:391:35 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:28:391:35 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:391:37:391:42 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:391:37:391:42 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:391:37:391:42 | search | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:391:37:391:42 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:391:37:391:42 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | $('myId ... taint3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | $('myId ... taint3) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | $('myId ... taint3) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | $('myId ... taint3) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | $('myId ... taint3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | exceptional return of $('myId ... taint3) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | exceptional return of $('myId ... taint3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | exceptional return of $('myId ... taint3) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | exceptional return of $('myId ... taint3) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:3:392:31 | exceptional return of $('myId ... taint3) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:5:392:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:13:392:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:13:392:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:13:392:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:13:392:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:13:392:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:18:392:30 | target.taint3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:392:25:392:30 | taint3 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:392:25:392:30 | taint3 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:392:25:392:30 | taint3 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:392:25:392:30 | taint3 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:392:25:392:30 | taint3 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:12 | target.sub | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:12 | target.sub | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:12 | target.sub | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:12 | target.sub | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:12 | target.sub | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:19 | target.sub.taint4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:19 | target.sub.taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:19 | target.sub.taint4 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:19 | target.sub.taint4 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:19 | target.sub.taint4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:23 | target. ... nt4 = 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:23 | target. ... nt4 = 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:23 | target. ... nt4 = 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:23 | target. ... nt4 = 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:3:394:23 | target. ... nt4 = 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:10:394:12 | sub | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:10:394:12 | sub | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:10:394:12 | sub | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:10:394:12 | sub | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:10:394:12 | sub | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:14:394:19 | taint4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:14:394:19 | taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:14:394:19 | taint4 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:14:394:19 | taint4 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:14:394:19 | taint4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | assignedToPropName | taint4 |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:394:23:394:23 | 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | $('myId ... taint4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | $('myId ... taint4) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | $('myId ... taint4) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | $('myId ... taint4) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | $('myId ... taint4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | exceptional return of $('myId ... taint4) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | exceptional return of $('myId ... taint4) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | exceptional return of $('myId ... taint4) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | exceptional return of $('myId ... taint4) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:3:395:35 | exceptional return of $('myId ... taint4) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:5:395:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:13:395:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:13:395:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:13:395:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:13:395:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:13:395:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:27 | target.sub | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:27 | target.sub | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:27 | target.sub | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:27 | target.sub | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:27 | target.sub | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:18:395:34 | target.sub.taint4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:25:395:27 | sub | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:25:395:27 | sub | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:25:395:27 | sub | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:25:395:27 | sub | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:25:395:27 | sub | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:395:29:395:34 | taint4 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:395:29:395:34 | taint4 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:395:29:395:34 | taint4 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:395:29:395:34 | taint4 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:395:29:395:34 | taint4 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | $('myId ... taint5) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | $('myId ... taint5) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | $('myId ... taint5) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | $('myId ... taint5) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | $('myId ... taint5) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | exceptional return of $('myId ... taint5) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | exceptional return of $('myId ... taint5) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | exceptional return of $('myId ... taint5) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | exceptional return of $('myId ... taint5) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:3:397:31 | exceptional return of $('myId ... taint5) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:5:397:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:13:397:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:13:397:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:13:397:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:13:397:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:13:397:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:18:397:30 | target.taint5 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:397:25:397:30 | taint5 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:397:25:397:30 | taint5 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:397:25:397:30 | taint5 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:397:25:397:30 | taint5 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:397:25:397:30 | taint5 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:15 | target.taint5 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:15 | target.taint5 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:15 | target.taint5 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:15 | target.taint5 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:15 | target.taint5 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:24 | target. ...  "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:24 | target. ...  "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:24 | target. ...  "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:24 | target. ...  "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:398:3:398:24 | target. ...  "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:398:10:398:15 | taint5 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:398:10:398:15 | taint5 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:398:10:398:15 | taint5 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:398:10:398:15 | taint5 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:398:10:398:15 | taint5 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | assignedToPropName | taint5 |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:398:19:398:24 | "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:15 | target.taint6 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:15 | target.taint6 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:15 | target.taint6 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:15 | target.taint6 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:15 | target.taint6 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:19 | target.taint6 = 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:19 | target.taint6 = 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:19 | target.taint6 = 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:19 | target.taint6 = 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:400:3:400:19 | target.taint6 = 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:400:10:400:15 | taint6 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:400:10:400:15 | taint6 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:400:10:400:15 | taint6 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:400:10:400:15 | taint6 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:400:10:400:15 | taint6 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | assignedToPropName | taint6 |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:400:19:400:19 | 2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:12 | random | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:12 | random | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:12 | random | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:12 | random | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:12 | random | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | exceptional return of random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | exceptional return of random() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | exceptional return of random() | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | exceptional return of random() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | exceptional return of random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | random() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | random() | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | random() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:401:7:401:14 | random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | $('myId ... taint6) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | $('myId ... taint6) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | $('myId ... taint6) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | $('myId ... taint6) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | $('myId ... taint6) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | exceptional return of $('myId ... taint6) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | exceptional return of $('myId ... taint6) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | exceptional return of $('myId ... taint6) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | exceptional return of $('myId ... taint6) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:3:402:31 | exceptional return of $('myId ... taint6) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:5:402:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:13:402:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:13:402:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:13:402:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:13:402:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:13:402:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:18:402:30 | target.taint6 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:402:25:402:30 | taint6 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:402:25:402:30 | taint6 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:402:25:402:30 | taint6 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:402:25:402:30 | taint6 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:402:25:402:30 | taint6 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:12 | random | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:12 | random | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:12 | random | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:12 | random | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:12 | random | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | exceptional return of random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | exceptional return of random() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | exceptional return of random() | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | exceptional return of random() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | exceptional return of random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | random() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | random() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | random() | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | random() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:7:405:14 | random() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:30 | target.taint7 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:30 | target.taint7 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:30 | target.taint7 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:30 | target.taint7 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:30 | target.taint7 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:39 | target. ...  "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:39 | target. ...  "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:39 | target. ...  "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:39 | target. ...  "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:18:405:39 | target. ...  "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:25:405:30 | taint7 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:25:405:30 | taint7 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:25:405:30 | taint7 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:25:405:30 | taint7 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:25:405:30 | taint7 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | assignedToPropName | taint7 |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:405:34:405:39 | "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | $('myId ... taint7) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | $('myId ... taint7) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | $('myId ... taint7) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | $('myId ... taint7) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | $('myId ... taint7) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | exceptional return of $('myId ... taint7) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | exceptional return of $('myId ... taint7) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | exceptional return of $('myId ... taint7) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | exceptional return of $('myId ... taint7) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:3:406:31 | exceptional return of $('myId ... taint7) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:5:406:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:13:406:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:13:406:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:13:406:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:13:406:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:13:406:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:18:406:30 | target.taint7 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:406:25:406:30 | taint7 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:406:25:406:30 | taint7 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:406:25:406:30 | taint7 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:406:25:406:30 | taint7 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:406:25:406:30 | taint7 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:15 | target.taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:15 | target.taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:15 | target.taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:15 | target.taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:15 | target.taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:31 | target. ... .taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:31 | target. ... .taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:31 | target. ... .taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:31 | target. ... .taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:3:408:31 | target. ... .taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:10:408:15 | taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:10:408:15 | taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:10:408:15 | taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:10:408:15 | taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:10:408:15 | taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:24 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:24 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:24 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:24 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:24 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | assignedToPropName | taint8 |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:19:408:31 | target.taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:408:26:408:31 | taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:408:26:408:31 | taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:408:26:408:31 | taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:408:26:408:31 | taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:408:26:408:31 | taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | $('myId ... taint8) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | $('myId ... taint8) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | $('myId ... taint8) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | $('myId ... taint8) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | $('myId ... taint8) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | exceptional return of $('myId ... taint8) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | exceptional return of $('myId ... taint8) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | exceptional return of $('myId ... taint8) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | exceptional return of $('myId ... taint8) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:3:409:31 | exceptional return of $('myId ... taint8) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:5:409:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:13:409:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:13:409:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:13:409:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:13:409:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:13:409:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:18:409:30 | target.taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:409:25:409:30 | taint8 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:409:25:409:30 | taint8 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:409:25:409:30 | taint8 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:409:25:409:30 | taint8 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:409:25:409:30 | taint8 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:8 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:8 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:8 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:8 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:15 | target.taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:15 | target.taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:15 | target.taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:15 | target.taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:15 | target.taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:42 | target. ... "safe") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:42 | target. ... "safe") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:42 | target. ... "safe") | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:42 | target. ... "safe") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:3:411:42 | target. ... "safe") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:10:411:15 | taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:10:411:15 | taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:10:411:15 | taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:10:411:15 | taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:10:411:15 | taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:19:411:42 | (target ... "safe") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:19:411:42 | (target ... "safe") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:19:411:42 | (target ... "safe") | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:19:411:42 | (target ... "safe") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:19:411:42 | (target ... "safe") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:25 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:25 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:25 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:25 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:25 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:32 | target.taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:32 | target.taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:32 | target.taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:32 | target.taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:32 | target.taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:41 | target. ...  "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:41 | target. ...  "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:41 | target. ...  "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:41 | target. ...  "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:20:411:41 | target. ...  "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:27:411:32 | taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:27:411:32 | taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:27:411:32 | taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:27:411:32 | taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:27:411:32 | taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | assignedToPropName | taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:411:36:411:41 | "safe" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:3 | $ | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:3 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | exceptional return of $('myId') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | exceptional return of $('myId') | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | exceptional return of $('myId') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:11 | exceptional return of $('myId') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:16 | $('myId').html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:16 | $('myId').html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:16 | $('myId').html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:16 | $('myId').html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | $('myId ... taint9) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | $('myId ... taint9) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | $('myId ... taint9) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | $('myId ... taint9) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | $('myId ... taint9) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | exceptional return of $('myId ... taint9) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | exceptional return of $('myId ... taint9) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | exceptional return of $('myId ... taint9) | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | exceptional return of $('myId ... taint9) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:3:412:31 | exceptional return of $('myId ... taint9) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:5:412:10 | 'myId' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:13:412:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:13:412:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:13:412:16 | html | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:13:412:16 | html | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:13:412:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:23 | target | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:23 | target | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:18:412:30 | target.taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:412:25:412:30 | taint9 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:412:25:412:30 | taint9 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:412:25:412:30 | taint9 | enclosingFunctionBody | target document location search $ myId html target $ myId html target taint target taint2 2 $ myId html target taint2 target taint3 document location search $ myId html target taint3 target sub taint4 2 $ myId html target sub taint4 $ myId html target taint5 target taint5 safe target taint6 2 random $ myId html target taint6 random target taint7 safe $ myId html target taint7 target taint8 target taint8 $ myId html target taint8 target taint9 target taint9 safe $ myId html target taint9 |
| autogenerated/Xss/DomBasedXss/tst.js:412:25:412:30 | taint9 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/tst.js:412:25:412:30 | taint9 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:415:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:415:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:415:0 | this | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:415:0 | this | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:415:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | 'arguments' object of function hash2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | 'arguments' object of function hash2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | 'arguments' object of function hash2 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | 'arguments' object of function hash2 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | 'arguments' object of function hash2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | exceptional return of function hash2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | exceptional return of function hash2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | exceptional return of function hash2 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | exceptional return of function hash2 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | exceptional return of function hash2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | return of function hash2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | return of function hash2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | return of function hash2 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | return of function hash2 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:415:1:425:1 | return of function hash2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:415:10:415:14 | hash2 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:415:10:415:14 | hash2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:415:10:415:14 | hash2 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:13 | payload | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:13 | payload | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:13 | payload | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:13 | payload | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:13 | payload | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload ... bstr(1) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload ... bstr(1) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:7:416:46 | payload ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:22 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:22 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:22 | window | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:22 | window | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:22 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:31 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:31 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:31 | window.location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:31 | window.location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:31 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:36 | window.location.hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:36 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:36 | window.location.hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:36 | window.location.hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:36 | window.location.hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:43 | window. ... .substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:43 | window. ... .substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:43 | window. ... .substr | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:43 | window. ... .substr | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:43 | window. ... .substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | exceptional return of window. ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | exceptional return of window. ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | exceptional return of window. ... bstr(1) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | exceptional return of window. ... bstr(1) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | exceptional return of window. ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | window. ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | window. ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | window. ... bstr(1) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | window. ... bstr(1) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:17:416:46 | window. ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:24:416:31 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:24:416:31 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:24:416:31 | location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:24:416:31 | location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:24:416:31 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:33:416:36 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:33:416:36 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:33:416:36 | hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:33:416:36 | hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:33:416:36 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:38:416:43 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:38:416:43 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:38:416:43 | substr | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:38:416:43 | substr | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:38:416:43 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | CalleeFlexibleAccessPath | window.location.hash.substr |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:416:45:416:45 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:10 | document | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:10 | document | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:16 | document.write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:16 | document.write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | documen ... ayload) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | documen ... ayload) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | documen ... ayload) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | documen ... ayload) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | documen ... ayload) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | exceptional return of documen ... ayload) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | exceptional return of documen ... ayload) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | exceptional return of documen ... ayload) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | exceptional return of documen ... ayload) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:3:417:25 | exceptional return of documen ... ayload) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:12:417:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:12:417:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:417:12:417:16 | write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:12:417:16 | write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:12:417:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:417:18:417:24 | payload | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:11 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:11 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:11 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:11 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:11 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match = ... (\\w+)/) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match = ... (\\w+)/) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match = ... (\\w+)/) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match = ... (\\w+)/) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:7:419:55 | match = ... (\\w+)/) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:20 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:20 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:20 | window | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:20 | window | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:20 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:29 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:29 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:29 | window.location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:29 | window.location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:29 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:34 | window.location.hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:34 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:34 | window.location.hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:34 | window.location.hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:34 | window.location.hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:40 | window. ... h.match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:40 | window. ... h.match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:40 | window. ... h.match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:40 | window. ... h.match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:40 | window. ... h.match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | exceptional return of window. ... (\\w+)/) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | exceptional return of window. ... (\\w+)/) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | exceptional return of window. ... (\\w+)/) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | exceptional return of window. ... (\\w+)/) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | exceptional return of window. ... (\\w+)/) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | window. ... (\\w+)/) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | window. ... (\\w+)/) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | window. ... (\\w+)/) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | window. ... (\\w+)/) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:15:419:55 | window. ... (\\w+)/) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:22:419:29 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:22:419:29 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:22:419:29 | location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:22:419:29 | location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:22:419:29 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:31:419:34 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:31:419:34 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:31:419:34 | hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:31:419:34 | hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:31:419:34 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:36:419:40 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:36:419:40 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:36:419:40 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:36:419:40 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:36:419:40 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | CalleeFlexibleAccessPath | window.location.hash.match |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:419:42:419:54 | /hello (\\w+)/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:420:7:420:11 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:12 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:12 | document | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:12 | document | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:12 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:18 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:18 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:18 | document.write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:18 | document.write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:18 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | documen ... tch[1]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | documen ... tch[1]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | documen ... tch[1]) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | documen ... tch[1]) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | documen ... tch[1]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | exceptional return of documen ... tch[1]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | exceptional return of documen ... tch[1]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | exceptional return of documen ... tch[1]) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | exceptional return of documen ... tch[1]) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:5:421:28 | exceptional return of documen ... tch[1]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:14:421:18 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:14:421:18 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:14:421:18 | write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:14:421:18 | write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:14:421:18 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:24 | match | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:24 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:24 | match | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:24 | match | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:24 | match | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:421:20:421:27 | match[1] | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:421:26:421:26 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:421:26:421:26 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:421:26:421:26 | 1 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:421:26:421:26 | 1 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:421:26:421:26 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:10 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:10 | document | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:10 | document | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:10 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:16 | document.write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:16 | document.write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:16 | document.write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:16 | document.write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:16 | document.write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | documen ... #')[1]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | documen ... #')[1]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | documen ... #')[1]) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | documen ... #')[1]) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | documen ... #')[1]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | exceptional return of documen ... #')[1]) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | exceptional return of documen ... #')[1]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | exceptional return of documen ... #')[1]) | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | exceptional return of documen ... #')[1]) | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:3:424:52 | exceptional return of documen ... #')[1]) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:12:424:16 | write | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:12:424:16 | write | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:12:424:16 | write | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:12:424:16 | write | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:12:424:16 | write | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:23 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:23 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:23 | window | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:23 | window | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:23 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:32 | window.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:32 | window.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:32 | window.location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:32 | window.location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:32 | window.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:37 | window.location.hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:37 | window.location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:37 | window.location.hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:37 | window.location.hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:37 | window.location.hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:43 | window. ... h.split | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:43 | window. ... h.split | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:43 | window. ... h.split | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:43 | window. ... h.split | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:43 | window. ... h.split | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | exceptional return of window. ... it('#') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | exceptional return of window. ... it('#') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | exceptional return of window. ... it('#') | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | exceptional return of window. ... it('#') | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | exceptional return of window. ... it('#') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | window. ... it('#') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | window. ... it('#') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | window. ... it('#') | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | window. ... it('#') | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:48 | window. ... it('#') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | CalleeFlexibleAccessPath | document.write |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:18:424:51 | window. ... '#')[1] | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:424:25:424:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:25:424:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:25:424:32 | location | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:25:424:32 | location | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:25:424:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:34:424:37 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:34:424:37 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:34:424:37 | hash | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:34:424:37 | hash | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:34:424:37 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:39:424:43 | split | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:39:424:43 | split | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:39:424:43 | split | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:39:424:43 | split | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:39:424:43 | split | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | CalleeFlexibleAccessPath | window.location.hash.split |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:45:424:47 | '#' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:424:50:424:50 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:424:50:424:50 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:424:50:424:50 | 1 | enclosingFunctionBody | payload window location hash substr 1 document write payload match window location hash match /hello (\\w+)/ match document write match 1 1 document write window 1 location hash split # 1 |
| autogenerated/Xss/DomBasedXss/tst.js:424:50:424:50 | 1 | enclosingFunctionName | hash2 |
| autogenerated/Xss/DomBasedXss/tst.js:424:50:424:50 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:427:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:427:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:427:0 | this | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:427:0 | this | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:427:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | 'arguments' object of function nonGlobalSanitizer | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | 'arguments' object of function nonGlobalSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | 'arguments' object of function nonGlobalSanitizer | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | 'arguments' object of function nonGlobalSanitizer | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | 'arguments' object of function nonGlobalSanitizer | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | exceptional return of function nonGlobalSanitizer | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | exceptional return of function nonGlobalSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | exceptional return of function nonGlobalSanitizer | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | exceptional return of function nonGlobalSanitizer | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | exceptional return of function nonGlobalSanitizer | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | functio ... // OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | functio ... // OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | return of function nonGlobalSanitizer | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | return of function nonGlobalSanitizer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | return of function nonGlobalSanitizer | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | return of function nonGlobalSanitizer | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:427:1:433:1 | return of function nonGlobalSanitizer | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:427:10:427:27 | nonGlobalSanitizer | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:427:10:427:27 | nonGlobalSanitizer | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:427:10:427:27 | nonGlobalSanitizer | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:12 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:12 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:12 | target | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:12 | target | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:12 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target  ... .search | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target  ... .search | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:7:428:39 | target  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:23 | document | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:23 | document | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:32 | document.location | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:32 | document.location | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:39 | documen ... .search | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:39 | documen ... .search | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:16:428:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:25:428:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:25:428:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:25:428:32 | location | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:25:428:32 | location | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:25:428:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:428:34:428:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:428:34:428:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:428:34:428:39 | search | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:428:34:428:39 | search | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:428:34:428:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:3 | $ | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:3 | $ | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | $("#foo") | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | $("#foo") | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | exceptional return of $("#foo") | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | exceptional return of $("#foo") | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:16 | $("#foo").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:16 | $("#foo").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:16 | $("#foo").html | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:16 | $("#foo").html | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:16 | $("#foo").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | $("#foo ... ata>')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | $("#foo ... ata>')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | $("#foo ... ata>')) | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | $("#foo ... ata>')) | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | $("#foo ... ata>')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | exceptional return of $("#foo ... ata>')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | exceptional return of $("#foo ... ata>')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | exceptional return of $("#foo ... ata>')) | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | exceptional return of $("#foo ... ata>')) | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:3:430:90 | exceptional return of $("#foo ... ata>')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:5:430:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:13:430:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:13:430:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:13:430:16 | html | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:13:430:16 | html | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:13:430:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:23 | target | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:23 | target | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:31 | target.replace | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:31 | target.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:31 | target.replace | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:31 | target.replace | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:31 | target.replace | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | exceptional return of target. ... data>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | exceptional return of target. ... data>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | exceptional return of target. ... data>') | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | exceptional return of target. ... data>') | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | exceptional return of target. ... data>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:18:430:89 | target. ... data>') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:25:430:31 | replace | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:25:430:31 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:25:430:31 | replace | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:25:430:31 | replace | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:25:430:31 | replace | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | CalleeFlexibleAccessPath | target.replace |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:33:430:63 | /<metad ... adata>/ | receiverName | target |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | CalleeFlexibleAccessPath | target.replace |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:430:66:430:88 | '<metad ... adata>' | receiverName | target |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:3 | $ | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:3 | $ | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | $("#foo") | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | $("#foo") | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | exceptional return of $("#foo") | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | exceptional return of $("#foo") | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:16 | $("#foo").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:16 | $("#foo").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:16 | $("#foo").html | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:16 | $("#foo").html | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:16 | $("#foo").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | $("#foo ... g, '')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | $("#foo ... g, '')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | $("#foo ... g, '')) | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | $("#foo ... g, '')) | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | $("#foo ... g, '')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | exceptional return of $("#foo ... g, '')) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | exceptional return of $("#foo ... g, '')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | exceptional return of $("#foo ... g, '')) | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | exceptional return of $("#foo ... g, '')) | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:3:432:44 | exceptional return of $("#foo ... g, '')) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:5:432:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:13:432:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:13:432:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:13:432:16 | html | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:13:432:16 | html | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:13:432:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:23 | target | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:23 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:23 | target | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:23 | target | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:23 | target | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:31 | target.replace | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:31 | target.replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:31 | target.replace | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:31 | target.replace | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:31 | target.replace | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | exceptional return of target. ... /g, '') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | exceptional return of target. ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | exceptional return of target. ... /g, '') | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | exceptional return of target. ... /g, '') | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | exceptional return of target. ... /g, '') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:18:432:43 | target. ... /g, '') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:25:432:31 | replace | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:25:432:31 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:25:432:31 | replace | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:25:432:31 | replace | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:25:432:31 | replace | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | CalleeFlexibleAccessPath | target.replace |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:33:432:38 | /<\|>/g | receiverName | target |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | CalleeFlexibleAccessPath | target.replace |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | enclosingFunctionBody | target document location search $ #foo html target replace /<metadata>[\\s\\S]*<\\/metadata>/ <metadata></metadata> $ #foo html target replace /<\|>/g  |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | enclosingFunctionName | nonGlobalSanitizer |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:432:41:432:42 | '' | receiverName | target |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:435:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:435:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:435:0 | this | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:435:0 | this | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:435:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | 'arguments' object of function mootools | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | 'arguments' object of function mootools | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | 'arguments' object of function mootools | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | 'arguments' object of function mootools | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | 'arguments' object of function mootools | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | exceptional return of function mootools | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | exceptional return of function mootools | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | exceptional return of function mootools | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | exceptional return of function mootools | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | exceptional return of function mootools | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | return of function mootools | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | return of function mootools | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | return of function mootools | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | return of function mootools | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:435:1:446:1 | return of function mootools | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:435:10:435:17 | mootools | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:435:10:435:17 | mootools | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:435:10:435:17 | mootools | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:11 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:11 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:11 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:11 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:11 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source  ... .search | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source  ... .search | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:6:436:38 | source  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:22 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:22 | document | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:22 | document | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:22 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:31 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:31 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:31 | document.location | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:31 | document.location | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:31 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:38 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:38 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:38 | documen ... .search | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:38 | documen ... .search | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:15:436:38 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:24:436:31 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:24:436:31 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:24:436:31 | location | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:24:436:31 | location | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:24:436:31 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:436:33:436:38 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:436:33:436:38 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:436:33:436:38 | search | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:436:33:436:38 | search | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:436:33:436:38 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:438:2:438:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:438:6:438:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:438:6:438:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:438:6:438:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:438:6:438:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:438:6:438:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:438:14:438:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | exceptional return of new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | exceptional return of new Ele ... ource}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | exceptional return of new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | exceptional return of new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | exceptional return of new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | new Ele ... ource}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:2:439:35 | new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:6:439:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:6:439:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:6:439:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:6:439:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:6:439:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:14:439:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:21:439:34 | {text: source} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:25 | text | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:25 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:25 | text | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:25 | text | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:25 | text | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:22:439:33 | text: source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | InputAccessPathFromCallee | ?.text |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | assignedToPropName | text |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:439:28:439:33 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | exceptional return of new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | exceptional return of new Ele ... ource}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | exceptional return of new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | exceptional return of new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | exceptional return of new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | new Ele ... ource}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:2:440:35 | new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:6:440:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:6:440:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:6:440:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:6:440:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:6:440:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:14:440:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:21:440:34 | {html: source} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:25 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:25 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:25 | html | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:25 | html | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:25 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:22:440:33 | html: source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | InputAccessPathFromCallee | ?.html |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:440:28:440:33 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:23 | new Ele ... v").set | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:23 | new Ele ... v").set | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:23 | new Ele ... v").set | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:23 | new Ele ... v").set | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:23 | new Ele ... v").set | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | exceptional return of new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | exceptional return of new Ele ... source) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | exceptional return of new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | exceptional return of new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | exceptional return of new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | new Ele ... source) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:2:441:39 | new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:6:441:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:6:441:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:6:441:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:6:441:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:6:441:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:14:441:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:21:441:23 | set | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:21:441:23 | set | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:21:441:23 | set | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:21:441:23 | set | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:21:441:23 | set | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | CalleeFlexibleAccessPath | Element().set |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:25:441:30 | "html" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | CalleeFlexibleAccessPath | Element().set |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:441:33:441:38 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:23 | new Ele ... v").set | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:23 | new Ele ... v").set | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:23 | new Ele ... v").set | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:23 | new Ele ... v").set | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:23 | new Ele ... v").set | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | exceptional return of new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | exceptional return of new Ele ... ource}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | exceptional return of new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | exceptional return of new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | exceptional return of new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | new Ele ... ource}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:2:442:41 | new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:6:442:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:6:442:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:6:442:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:6:442:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:6:442:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:14:442:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:21:442:23 | set | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:21:442:23 | set | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:21:442:23 | set | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:21:442:23 | set | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:21:442:23 | set | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | CalleeFlexibleAccessPath | Element().set |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:25:442:40 | {"html": source} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:31 | "html" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:31 | "html" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:31 | "html" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:31 | "html" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:31 | "html" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:26:442:39 | "html": source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | CalleeFlexibleAccessPath | Element().set |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:442:34:442:39 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:31 | new Ele ... roperty | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:31 | new Ele ... roperty | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:31 | new Ele ... roperty | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:31 | new Ele ... roperty | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:31 | new Ele ... roperty | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | exceptional return of new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | exceptional return of new Ele ... source) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | exceptional return of new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | exceptional return of new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | exceptional return of new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | new Ele ... source) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:2:443:47 | new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:6:443:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:6:443:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:6:443:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:6:443:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:6:443:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:14:443:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:21:443:31 | setProperty | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:21:443:31 | setProperty | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:21:443:31 | setProperty | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:21:443:31 | setProperty | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:21:443:31 | setProperty | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | CalleeFlexibleAccessPath | Element().setProperty |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:33:443:38 | "html" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | CalleeFlexibleAccessPath | Element().setProperty |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:443:41:443:46 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:33 | new Ele ... perties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:33 | new Ele ... perties | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:33 | new Ele ... perties | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:33 | new Ele ... perties | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:33 | new Ele ... perties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | exceptional return of new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | exceptional return of new Ele ... ource}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | exceptional return of new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | exceptional return of new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | exceptional return of new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | new Ele ... ource}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | new Ele ... ource}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | new Ele ... ource}) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | new Ele ... ource}) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:2:444:51 | new Ele ... ource}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:6:444:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:6:444:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:6:444:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:6:444:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:6:444:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:14:444:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:21:444:33 | setProperties | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:21:444:33 | setProperties | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:21:444:33 | setProperties | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:21:444:33 | setProperties | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:21:444:33 | setProperties | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | CalleeFlexibleAccessPath | Element().setProperties |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:35:444:50 | {"html": source} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:41 | "html" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:41 | "html" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:41 | "html" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:41 | "html" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:41 | "html" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:36:444:49 | "html": source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | CalleeFlexibleAccessPath | Element().setProperties |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | assignedToPropName | html |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:444:44:444:49 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | exceptional return of new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | exceptional return of new Element("div") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | exceptional return of new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | exceptional return of new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | exceptional return of new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | new Element("div") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | new Element("div") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | new Element("div") | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | new Element("div") | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:19 | new Element("div") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:30 | new Ele ... endHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:30 | new Ele ... endHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:30 | new Ele ... endHtml | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:30 | new Ele ... endHtml | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:30 | new Ele ... endHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | exceptional return of new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | exceptional return of new Ele ... source) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | exceptional return of new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | exceptional return of new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | exceptional return of new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | new Ele ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | new Ele ... source) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | new Ele ... source) | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | new Ele ... source) | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:2:445:38 | new Ele ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:6:445:12 | Element | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:6:445:12 | Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:6:445:12 | Element | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:6:445:12 | Element | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:6:445:12 | Element | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | CalleeFlexibleAccessPath | Element |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:14:445:18 | "div" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:21:445:30 | appendHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:21:445:30 | appendHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:21:445:30 | appendHtml | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:21:445:30 | appendHtml | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:21:445:30 | appendHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | CalleeFlexibleAccessPath | Element().appendHtml |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | enclosingFunctionBody | source document location search Element div Element div text source Element div html source Element div set html source Element div set html source Element div setProperty html source Element div setProperties html source Element div appendHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | enclosingFunctionName | mootools |
| autogenerated/Xss/DomBasedXss/tst.js:445:32:445:37 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:13 | Convert | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:13 | Convert | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:13 | Convert | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert ... -html') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:7:449:39 | Convert ... -html') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:23 | require | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:23 | require | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | exceptional return of require ... -html') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | exceptional return of require ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | exceptional return of require ... -html') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | require ... -html') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | require ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:17:449:39 | require ... -html') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | calleeImports |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:449:25:449:38 | 'ansi-to-html' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:16 | ansiToHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:16 | ansiToHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:16 | ansiToHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:16 | ansiToHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToH ... nvert() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToH ... nvert() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToH ... nvert() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:7:450:32 | ansiToHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | exceptional return of new Convert() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | exceptional return of new Convert() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | exceptional return of new Convert() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | new Convert() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | new Convert() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:20:450:32 | new Convert() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:450:24:450:30 | Convert | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:450:24:450:30 | Convert | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:450:24:450:30 | Convert | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | ansiToHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | ansiToHtml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | ansiToHtml | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | ansiToHtml | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | ansiToHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | this | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | this | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:452:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | 'arguments' object of function ansiToHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | 'arguments' object of function ansiToHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | 'arguments' object of function ansiToHTML | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | 'arguments' object of function ansiToHTML | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | 'arguments' object of function ansiToHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | exceptional return of function ansiToHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | exceptional return of function ansiToHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | exceptional return of function ansiToHTML | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | exceptional return of function ansiToHTML | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | exceptional return of function ansiToHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | return of function ansiToHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | return of function ansiToHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | return of function ansiToHTML | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | return of function ansiToHTML | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:452:1:457:1 | return of function ansiToHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:452:10:452:19 | ansiToHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:452:10:452:19 | ansiToHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:452:10:452:19 | ansiToHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:12 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:12 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:12 | source | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:12 | source | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:12 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source  ... .search | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source  ... .search | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:7:453:39 | source  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:23 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:23 | document | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:23 | document | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:23 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:32 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:32 | document.location | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:32 | document.location | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:32 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:39 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:39 | documen ... .search | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:39 | documen ... .search | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:16:453:39 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:25:453:32 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:25:453:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:25:453:32 | location | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:25:453:32 | location | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:25:453:32 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:453:34:453:39 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:453:34:453:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:453:34:453:39 | search | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:453:34:453:39 | search | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:453:34:453:39 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:3 | $ | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:3 | $ | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | $("#foo") | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | $("#foo") | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | exceptional return of $("#foo") | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | exceptional return of $("#foo") | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:16 | $("#foo").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:16 | $("#foo").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:16 | $("#foo").html | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:16 | $("#foo").html | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:16 | $("#foo").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | $("#foo ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | $("#foo ... source) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | $("#foo ... source) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | $("#foo ... source) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | $("#foo ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | exceptional return of $("#foo ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | exceptional return of $("#foo ... source) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | exceptional return of $("#foo ... source) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | exceptional return of $("#foo ... source) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:3:455:24 | exceptional return of $("#foo ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:5:455:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:13:455:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:13:455:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:13:455:16 | html | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:13:455:16 | html | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:13:455:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:455:18:455:23 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:3 | $ | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:3 | $ | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | $("#foo") | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | $("#foo") | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | exceptional return of $("#foo") | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | exceptional return of $("#foo") | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:16 | $("#foo").html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:16 | $("#foo").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:16 | $("#foo").html | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:16 | $("#foo").html | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:16 | $("#foo").html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | $("#foo ... ource)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | $("#foo ... ource)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | $("#foo ... ource)) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | $("#foo ... ource)) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | $("#foo ... ource)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | exceptional return of $("#foo ... ource)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | exceptional return of $("#foo ... ource)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | exceptional return of $("#foo ... ource)) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | exceptional return of $("#foo ... ource)) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:3:456:43 | exceptional return of $("#foo ... ource)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:5:456:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:13:456:16 | html | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:13:456:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:13:456:16 | html | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:13:456:16 | html | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:13:456:16 | html | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:27 | ansiToHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:27 | ansiToHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:27 | ansiToHtml | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:27 | ansiToHtml | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:27 | ansiToHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:34 | ansiToHtml.toHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:34 | ansiToHtml.toHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:34 | ansiToHtml.toHtml | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:34 | ansiToHtml.toHtml | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:34 | ansiToHtml.toHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | ansiToH ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | exceptional return of ansiToH ... source) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | exceptional return of ansiToH ... source) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | exceptional return of ansiToH ... source) | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | exceptional return of ansiToH ... source) | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:18:456:42 | exceptional return of ansiToH ... source) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:29:456:34 | toHtml | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:29:456:34 | toHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:29:456:34 | toHtml | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:29:456:34 | toHtml | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:29:456:34 | toHtml | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | CalleeFlexibleAccessPath | ansiToHtml.toHtml |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | calleeImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | enclosingFunctionBody | source document location search $ #foo html source $ #foo html ansiToHtml toHtml source |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | enclosingFunctionName | ansiToHTML |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:456:36:456:41 | source | receiverName | ansiToHtml |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:459:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:459:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:459:0 | this | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:459:0 | this | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:459:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | 'arguments' object of function domMethods | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | 'arguments' object of function domMethods | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | 'arguments' object of function domMethods | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | 'arguments' object of function domMethods | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | 'arguments' object of function domMethods | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | exceptional return of function domMethods | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | exceptional return of function domMethods | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | exceptional return of function domMethods | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | exceptional return of function domMethods | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | exceptional return of function domMethods | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | return of function domMethods | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | return of function domMethods | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | return of function domMethods | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | return of function domMethods | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:459:1:468:1 | return of function domMethods | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:459:10:459:19 | domMethods | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:459:10:459:19 | domMethods | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:459:10:459:19 | domMethods | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:11 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:11 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:11 | source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:11 | source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:11 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source  ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source  ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source  ... .search | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source  ... .search | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:6:460:38 | source  ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:22 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:22 | document | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:22 | document | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:22 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:31 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:31 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:31 | document.location | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:31 | document.location | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:31 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:38 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:38 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:38 | documen ... .search | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:38 | documen ... .search | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:15:460:38 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:24:460:31 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:24:460:31 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:24:460:31 | location | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:24:460:31 | location | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:24:460:31 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:460:33:460:38 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:460:33:460:38 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:460:33:460:38 | search | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:460:33:460:38 | search | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:460:33:460:38 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:11 | table | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:11 | table | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:11 | table | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:11 | table | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:11 | table | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table = ... table') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table = ... table') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table = ... table') | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table = ... table') | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:7:462:48 | table = ... table') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:22 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:22 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:22 | document | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:22 | document | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:22 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:37 | documen ... entById | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:37 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:37 | documen ... entById | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:37 | documen ... entById | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:37 | documen ... entById | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | documen ... table') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | documen ... table') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | documen ... table') | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | documen ... table') | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | documen ... table') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | exceptional return of documen ... table') | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | exceptional return of documen ... table') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | exceptional return of documen ... table') | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | exceptional return of documen ... table') | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:15:462:48 | exceptional return of documen ... table') | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:24:462:37 | getElementById | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:24:462:37 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:24:462:37 | getElementById | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:24:462:37 | getElementById | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:24:462:37 | getElementById | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:462:39:462:47 | 'mytable' | receiverName | document |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:7 | table | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:7 | table | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:7 | table | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:7 | table | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:7 | table | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:17 | table.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:17 | table.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:17 | table.innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:17 | table.innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:17 | table.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:26 | table.i ...  source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:26 | table.i ...  source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:26 | table.i ...  source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:26 | table.i ...  source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:463:3:463:26 | table.i ...  source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:463:9:463:17 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:463:9:463:17 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:463:9:463:17 | innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:463:9:463:17 | innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:463:9:463:17 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:463:21:463:26 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:9 | row | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:9 | row | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:9 | row | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:9 | row | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:9 | row | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row = t ... Row(-1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row = t ... Row(-1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row = t ... Row(-1) | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row = t ... Row(-1) | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:7:464:31 | row = t ... Row(-1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:17 | table | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:17 | table | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:17 | table | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:17 | table | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:17 | table | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:27 | table.insertRow | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:27 | table.insertRow | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:27 | table.insertRow | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:27 | table.insertRow | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:27 | table.insertRow | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | exceptional return of table.insertRow(-1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | exceptional return of table.insertRow(-1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | exceptional return of table.insertRow(-1) | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | exceptional return of table.insertRow(-1) | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | exceptional return of table.insertRow(-1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | table.insertRow(-1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | table.insertRow(-1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | table.insertRow(-1) | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | table.insertRow(-1) | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:13:464:31 | table.insertRow(-1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:19:464:27 | insertRow | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:19:464:27 | insertRow | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:19:464:27 | insertRow | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:19:464:27 | insertRow | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:19:464:27 | insertRow | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | CalleeFlexibleAccessPath | table.insertRow |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:464:29:464:30 | -1 | receiverName | table |
| autogenerated/Xss/DomBasedXss/tst.js:464:30:464:30 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:464:30:464:30 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:464:30:464:30 | 1 | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:464:30:464:30 | 1 | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:464:30:464:30 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:5 | row | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:5 | row | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:5 | row | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:5 | row | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:5 | row | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:15 | row.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:15 | row.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:15 | row.innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:15 | row.innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:15 | row.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:24 | row.inn ...  source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:24 | row.inn ...  source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:24 | row.inn ...  source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:24 | row.inn ...  source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:465:3:465:24 | row.inn ...  source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:465:7:465:15 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:465:7:465:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:465:7:465:15 | innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:465:7:465:15 | innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:465:7:465:15 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:465:19:465:24 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:10 | cell | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:10 | cell | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:10 | cell | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:10 | cell | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:10 | cell | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell =  ... tCell() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell =  ... tCell() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell =  ... tCell() | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell =  ... tCell() | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:7:466:29 | cell =  ... tCell() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:16 | row | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:16 | row | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:16 | row | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:16 | row | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:16 | row | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:27 | row.insertCell | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:27 | row.insertCell | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:27 | row.insertCell | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:27 | row.insertCell | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:27 | row.insertCell | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | exceptional return of row.insertCell() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | exceptional return of row.insertCell() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | exceptional return of row.insertCell() | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | exceptional return of row.insertCell() | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | exceptional return of row.insertCell() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | row.insertCell() | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | row.insertCell() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | row.insertCell() | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | row.insertCell() | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:14:466:29 | row.insertCell() | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:466:18:466:27 | insertCell | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:466:18:466:27 | insertCell | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:466:18:466:27 | insertCell | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:466:18:466:27 | insertCell | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:466:18:466:27 | insertCell | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:6 | cell | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:6 | cell | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:6 | cell | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:6 | cell | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:6 | cell | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:16 | cell.innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:16 | cell.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:16 | cell.innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:16 | cell.innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:16 | cell.innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:25 | cell.in ...  source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:25 | cell.in ...  source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:25 | cell.in ...  source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:25 | cell.in ...  source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:467:3:467:25 | cell.in ...  source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:467:8:467:16 | innerHTML | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:467:8:467:16 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:467:8:467:16 | innerHTML | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:467:8:467:16 | innerHTML | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:467:8:467:16 | innerHTML | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | assignedToPropName | innerHTML |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | enclosingFunctionBody | source document location search table document getElementById mytable table innerHTML source row table insertRow 1 row innerHTML source cell row insertCell cell innerHTML source |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | enclosingFunctionName | domMethods |
| autogenerated/Xss/DomBasedXss/tst.js:467:20:467:25 | source | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:470:0 | this | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:470:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:470:0 | this | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:470:0 | this | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:470:0 | this | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | 'arguments' object of function urlStuff | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | 'arguments' object of function urlStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | 'arguments' object of function urlStuff | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | 'arguments' object of function urlStuff | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | 'arguments' object of function urlStuff | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | exceptional return of function urlStuff | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | exceptional return of function urlStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | exceptional return of function urlStuff | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | exceptional return of function urlStuff | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | exceptional return of function urlStuff | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | functio ... OT OK\\n} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | functio ... OT OK\\n} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | return of function urlStuff | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | return of function urlStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | return of function urlStuff | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | return of function urlStuff | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:470:1:492:1 | return of function urlStuff | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:470:10:470:17 | urlStuff | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:470:10:470:17 | urlStuff | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:470:10:470:17 | urlStuff | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:9 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:9 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:9 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:9 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:9 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url = d ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url = d ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url = d ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url = d ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:7:471:46 | url = d ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:20 | document | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:20 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:20 | document | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:20 | document | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:20 | document | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:29 | document.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:29 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:29 | document.location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:29 | document.location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:29 | document.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:36 | documen ... .search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:36 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:36 | documen ... .search | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:36 | documen ... .search | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:36 | documen ... .search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:43 | documen ... .substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:43 | documen ... .substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:43 | documen ... .substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:43 | documen ... .substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:43 | documen ... .substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | documen ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | documen ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | documen ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | documen ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | documen ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | exceptional return of documen ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | exceptional return of documen ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | exceptional return of documen ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | exceptional return of documen ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:13:471:46 | exceptional return of documen ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:22:471:29 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:22:471:29 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:22:471:29 | location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:22:471:29 | location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:22:471:29 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:31:471:36 | search | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:31:471:36 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:31:471:36 | search | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:31:471:36 | search | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:31:471:36 | search | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:38:471:43 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:38:471:43 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:38:471:43 | substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:38:471:43 | substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:38:471:43 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | CalleeFlexibleAccessPath | document.location.search.substr |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:471:45:471:45 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | $("<a>" ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | $("<a>" ... : url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | $("<a>" ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | $("<a>" ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | $("<a>" ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | exceptional return of $("<a>" ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | exceptional return of $("<a>" ... : url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | exceptional return of $("<a>" ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | exceptional return of $("<a>" ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:23 | exceptional return of $("<a>" ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:32 | $("<a>" ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:32 | $("<a>" ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:32 | $("<a>" ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:32 | $("<a>" ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:32 | $("<a>" ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | $("<a>" ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | $("<a>" ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | $("<a>" ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | $("<a>" ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | $("<a>" ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | exceptional return of $("<a>" ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | exceptional return of $("<a>" ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | exceptional return of $("<a>" ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | exceptional return of $("<a>" ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:3:473:40 | exceptional return of $("<a>" ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:5:473:9 | "<a>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:12:473:22 | {href: url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:16 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:16 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:16 | href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:16 | href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:16 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:13:473:21 | href: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | InputAccessPathFromCallee | 1.href |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | assignedToPropName | href |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:19:473:21 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:25:473:32 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:25:473:32 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:25:473:32 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:25:473:32 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:25:473:32 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:473:34:473:39 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | $("#foo") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | $("#foo") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | exceptional return of $("#foo") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | exceptional return of $("#foo") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:16 | $("#foo").attr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:16 | $("#foo").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:16 | $("#foo").attr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:16 | $("#foo").attr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:16 | $("#foo").attr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | $("#foo ... ", url) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | $("#foo ... ", url) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | $("#foo ... ", url) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | $("#foo ... ", url) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | $("#foo ... ", url) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | exceptional return of $("#foo ... ", url) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | exceptional return of $("#foo ... ", url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | exceptional return of $("#foo ... ", url) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | exceptional return of $("#foo ... ", url) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:3:474:29 | exceptional return of $("#foo ... ", url) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:5:474:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:13:474:16 | attr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:13:474:16 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:13:474:16 | attr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:13:474:16 | attr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:13:474:16 | attr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:18:474:23 | "href" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:474:26:474:28 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | $("#foo") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | $("#foo") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | exceptional return of $("#foo") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | exceptional return of $("#foo") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | exceptional return of $("#foo") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:11 | exceptional return of $("#foo") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:16 | $("#foo").attr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:16 | $("#foo").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:16 | $("#foo").attr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:16 | $("#foo").attr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:16 | $("#foo").attr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | $("#foo ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | $("#foo ... : url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | $("#foo ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | $("#foo ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | $("#foo ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | exceptional return of $("#foo ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | exceptional return of $("#foo ... : url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | exceptional return of $("#foo ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | exceptional return of $("#foo ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:3:475:29 | exceptional return of $("#foo ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:5:475:10 | "#foo" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:13:475:16 | attr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:13:475:16 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:13:475:16 | attr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:13:475:16 | attr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:13:475:16 | attr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:18:475:28 | {href: url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:22 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:22 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:22 | href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:22 | href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:22 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:19:475:27 | href: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | InputAccessPathFromCallee | 0.href |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | assignedToPropName | href |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:475:25:475:27 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | $("<img ... : url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | exceptional return of $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | exceptional return of $("<img ... : url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | exceptional return of $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | exceptional return of $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:24 | exceptional return of $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:33 | $("<img ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:33 | $("<img ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:33 | $("<img ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:33 | $("<img ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:33 | $("<img ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | $("<img ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | exceptional return of $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | exceptional return of $("<img ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | exceptional return of $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | exceptional return of $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:3:476:41 | exceptional return of $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:5:476:11 | "<img>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:14:476:23 | {src: url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:17 | src | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:17 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:17 | src | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:17 | src | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:17 | src | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:15:476:22 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | InputAccessPathFromCallee | 1.src |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | assignedToPropName | src |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:20:476:22 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:26:476:33 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:26:476:33 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:26:476:33 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:26:476:33 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:26:476:33 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:476:35:476:40 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | $("<a>" ... .href}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | $("<a>" ... .href}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | $("<a>" ... .href}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | $("<a>" ... .href}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | $("<a>" ... .href}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | exceptional return of $("<a>" ... .href}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | exceptional return of $("<a>" ... .href}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | exceptional return of $("<a>" ... .href}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | exceptional return of $("<a>" ... .href}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:37 | exceptional return of $("<a>" ... .href}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:46 | $("<a>" ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:46 | $("<a>" ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:46 | $("<a>" ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:46 | $("<a>" ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:46 | $("<a>" ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | $("<a>" ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | $("<a>" ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | $("<a>" ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | $("<a>" ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | $("<a>" ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | exceptional return of $("<a>" ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | exceptional return of $("<a>" ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | exceptional return of $("<a>" ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | exceptional return of $("<a>" ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:3:477:54 | exceptional return of $("<a>" ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:5:477:9 | "<a>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:12:477:36 | {href:  ... n.href} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:16 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:16 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:16 | href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:16 | href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:16 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:13:477:35 | href: w ... on.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:21 | win | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:21 | win | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:21 | win | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:21 | win | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:21 | win | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:30 | win.location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:30 | win.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:30 | win.location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:30 | win.location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:30 | win.location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | InputAccessPathFromCallee | 1.href |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | assignedToPropName | href |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:19:477:35 | win.location.href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:23:477:30 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:23:477:30 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:23:477:30 | location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:23:477:30 | location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:23:477:30 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:32:477:35 | href | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:32:477:35 | href | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:32:477:35 | href | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:32:477:35 | href | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:32:477:35 | href | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:39:477:46 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:39:477:46 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:39:477:46 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:39:477:46 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:39:477:46 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:477:48:477:53 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | $("<img ... + url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | $("<img ... + url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | $("<img ... + url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | $("<img ... + url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | $("<img ... + url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | exceptional return of $("<img ... + url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | exceptional return of $("<img ... + url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | exceptional return of $("<img ... + url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | exceptional return of $("<img ... + url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:47 | exceptional return of $("<img ... + url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:56 | $("<img ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:56 | $("<img ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:56 | $("<img ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:56 | $("<img ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:56 | $("<img ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | $("<img ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | exceptional return of $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | exceptional return of $("<img ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | exceptional return of $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | exceptional return of $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:3:479:64 | exceptional return of $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:5:479:11 | "<img>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:14:479:46 | {src: " ...  + url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:17 | src | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:17 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:17 | src | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:17 | src | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:17 | src | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:15:479:45 | src: "h ... " + url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:39 | "http://google.com/" | stringConcatenatedWith |  -endpoint- url |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | InputAccessPathFromCallee | 1.src |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | assignedToPropName | src |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:20:479:45 | "http:/ ... " + url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:43:479:45 | url | stringConcatenatedWith | 'http://google.com/' -endpoint-  |
| autogenerated/Xss/DomBasedXss/tst.js:479:49:479:56 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:49:479:56 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:49:479:56 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:49:479:56 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:49:479:56 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:479:58:479:63 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:3 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:3 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:3 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:3 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | $("<img ... ("/")}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | $("<img ... ("/")}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | $("<img ... ("/")}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | $("<img ... ("/")}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | $("<img ... ("/")}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | exceptional return of $("<img ... ("/")}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | exceptional return of $("<img ... ("/")}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | exceptional return of $("<img ... ("/")}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | exceptional return of $("<img ... ("/")}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:57 | exceptional return of $("<img ... ("/")}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:66 | $("<img ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:66 | $("<img ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:66 | $("<img ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:66 | $("<img ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:66 | $("<img ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | $("<img ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | exceptional return of $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | exceptional return of $("<img ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | exceptional return of $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | exceptional return of $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:3:481:74 | exceptional return of $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:5:481:11 | "<img>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:14:481:56 | {src: [ ... n("/")} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:17 | src | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:17 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:17 | src | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:17 | src | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:17 | src | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:15:481:55 | src: [" ... in("/") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:45 | ["http: ... ", url] | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:45 | ["http: ... ", url] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:45 | ["http: ... ", url] | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:45 | ["http: ... ", url] | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:45 | ["http: ... ", url] | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:50 | ["http: ... l].join | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:50 | ["http: ... l].join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:50 | ["http: ... l].join | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:50 | ["http: ... l].join | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:50 | ["http: ... l].join | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | InputAccessPathFromCallee | 1.src |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | assignedToPropName | src |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | ["http: ... in("/") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | exceptional return of ["http: ... in("/") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | exceptional return of ["http: ... in("/") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | exceptional return of ["http: ... in("/") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | exceptional return of ["http: ... in("/") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:20:481:55 | exceptional return of ["http: ... in("/") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:21:481:39 | "http://google.com" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:42:481:44 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:47:481:50 | join | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:47:481:50 | join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:47:481:50 | join | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:47:481:50 | join | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:47:481:50 | join | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | CalleeFlexibleAccessPath | ?.join |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:52:481:54 | "/" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:59:481:66 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:59:481:66 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:59:481:66 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:59:481:66 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:59:481:66 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:481:68:481:73 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:9 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:9 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:9 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:9 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:9 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:20 | url.startsWith | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:20 | url.startsWith | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:20 | url.startsWith | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:20 | url.startsWith | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:20 | url.startsWith | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | exceptional return of url.sta ... ps://") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | exceptional return of url.sta ... ps://") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | exceptional return of url.sta ... ps://") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | exceptional return of url.sta ... ps://") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | exceptional return of url.sta ... ps://") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | url.sta ... ps://") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | url.sta ... ps://") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | url.sta ... ps://") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | url.sta ... ps://") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:7:483:32 | url.sta ... ps://") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:11:483:20 | startsWith | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:11:483:20 | startsWith | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:483:11:483:20 | startsWith | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:11:483:20 | startsWith | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:11:483:20 | startsWith | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | CalleeFlexibleAccessPath | url.startsWith |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:483:22:483:31 | "https://" | receiverName | url |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:5 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:5 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | $("<img ... : url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | exceptional return of $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | exceptional return of $("<img ... : url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | exceptional return of $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | exceptional return of $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:26 | exceptional return of $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:35 | $("<img ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:35 | $("<img ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:35 | $("<img ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:35 | $("<img ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:35 | $("<img ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | $("<img ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | exceptional return of $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | exceptional return of $("<img ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | exceptional return of $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | exceptional return of $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:5:484:43 | exceptional return of $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:7:484:13 | "<img>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:16:484:25 | {src: url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:19 | src | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:19 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:19 | src | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:19 | src | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:19 | src | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:17:484:24 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | InputAccessPathFromCallee | 1.src |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | assignedToPropName | src |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:22:484:24 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:28:484:35 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:28:484:35 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:28:484:35 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:28:484:35 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:28:484:35 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:484:37:484:42 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:5 | $ | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:5 | $ | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:5 | $ | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:5 | $ | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | $("<img ... : url}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | exceptional return of $("<img ... : url}) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | exceptional return of $("<img ... : url}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | exceptional return of $("<img ... : url}) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | exceptional return of $("<img ... : url}) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:26 | exceptional return of $("<img ... : url}) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:35 | $("<img ... ppendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:35 | $("<img ... ppendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:35 | $("<img ... ppendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:35 | $("<img ... ppendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:35 | $("<img ... ppendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | $("<img ... "body") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | exceptional return of $("<img ... "body") | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | exceptional return of $("<img ... "body") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | exceptional return of $("<img ... "body") | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | exceptional return of $("<img ... "body") | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:5:486:43 | exceptional return of $("<img ... "body") | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:7:486:13 | "<img>" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:16:486:25 | {src: url} | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:19 | src | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:19 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:19 | src | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:19 | src | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:19 | src | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:17:486:24 | src: url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | InputAccessPathFromCallee | 1.src |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | assignedToPropName | src |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:22:486:24 | url | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:28:486:35 | appendTo | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:28:486:35 | appendTo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:28:486:35 | appendTo | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:28:486:35 | appendTo | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:28:486:35 | appendTo | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:486:37:486:42 | "body" | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:8 | window | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:8 | window | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:8 | window | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:8 | window | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:8 | window | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:13 | window.open | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:13 | window.open | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:13 | window.open | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:13 | window.open | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:13 | window.open | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | exceptional return of window. ... str(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | exceptional return of window. ... str(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | exceptional return of window. ... str(1)) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | exceptional return of window. ... str(1)) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | exceptional return of window. ... str(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | window. ... str(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | window. ... str(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | window. ... str(1)) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | window. ... str(1)) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:3:489:38 | window. ... str(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:10:489:13 | open | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:10:489:13 | open | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:10:489:13 | open | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:10:489:13 | open | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:10:489:13 | open | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:22 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:22 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:22 | location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:22 | location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:22 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:27 | location.hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:27 | location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:27 | location.hash | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:27 | location.hash | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:27 | location.hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:34 | location.hash.substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:34 | location.hash.substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:34 | location.hash.substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:34 | location.hash.substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:34 | location.hash.substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | exceptional return of locatio ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | exceptional return of locatio ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | exceptional return of locatio ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | exceptional return of locatio ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | exceptional return of locatio ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | CalleeFlexibleAccessPath | window.open |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:15:489:37 | locatio ... bstr(1) | receiverName | window |
| autogenerated/Xss/DomBasedXss/tst.js:489:24:489:27 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:24:489:27 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:24:489:27 | hash | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:24:489:27 | hash | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:24:489:27 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:29:489:34 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:29:489:34 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:29:489:34 | substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:29:489:34 | substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:29:489:34 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | CalleeFlexibleAccessPath | location.hash.substr |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:489:36:489:36 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:12 | navigation | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:12 | navigation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:12 | navigation | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:12 | navigation | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:12 | navigation | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:21 | navigation.navigate | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:21 | navigation.navigate | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:21 | navigation.navigate | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:21 | navigation.navigate | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:21 | navigation.navigate | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | exceptional return of navigat ... str(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | exceptional return of navigat ... str(1)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | exceptional return of navigat ... str(1)) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | exceptional return of navigat ... str(1)) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | exceptional return of navigat ... str(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | navigat ... str(1)) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | navigat ... str(1)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | navigat ... str(1)) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | navigat ... str(1)) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:3:491:46 | navigat ... str(1)) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:14:491:21 | navigate | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:14:491:21 | navigate | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:14:491:21 | navigate | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:14:491:21 | navigate | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:14:491:21 | navigate | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:30 | location | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:30 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:30 | location | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:30 | location | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:30 | location | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:35 | location.hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:35 | location.hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:35 | location.hash | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:35 | location.hash | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:35 | location.hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:42 | location.hash.substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:42 | location.hash.substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:42 | location.hash.substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:42 | location.hash.substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:42 | location.hash.substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | exceptional return of locatio ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | exceptional return of locatio ... bstr(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | exceptional return of locatio ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | exceptional return of locatio ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | exceptional return of locatio ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | CalleeFlexibleAccessPath | navigation.navigate |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:23:491:45 | locatio ... bstr(1) | receiverName | navigation |
| autogenerated/Xss/DomBasedXss/tst.js:491:32:491:35 | hash | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:32:491:35 | hash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:32:491:35 | hash | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:32:491:35 | hash | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:32:491:35 | hash | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:37:491:42 | substr | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:37:491:42 | substr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:37:491:42 | substr | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:37:491:42 | substr | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:37:491:42 | substr | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | CalleeFlexibleAccessPath | location.hash.substr |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | contextFunctionInterfaces | URLPseudoProperties()\nangularJSServices()\nansiToHTML()\nbar()\nbasicExceptions()\nbaz(x)\nchop(s)\nconstructor()\nconstructor(args)\nconstructor(props)\ndangerouslySetInnerHtml(s)\ndomMethods()\nflowThroughPropertyNames()\nfoo(target)\ngetTaintedUrl()\ngetUrl()\ngrowl()\nhandlebarsSafeString()\nhash()\nhash2()\njqueryLocation()\nlink(scope, element)\nmootools()\nmyPlugin()\nnonGlobalSanitizer()\nreact()\nreferences()\nrender()\ntest()\ntest()\ntest()\ntest()\ntest()\ntest2()\ntestCreateContextualFragment()\ntestDOMParser()\nthisNodes()\ntst()\nurlStuff()\nwindowName()\nwindowNameAssigned()\nwrap(s) |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | enclosingFunctionBody | url document location search substr 1 $ <a> href url appendTo body $ #foo attr href url $ #foo attr href url $ <img> src url appendTo body $ <a> href win location href appendTo body $ <img> src http://google.com/ url appendTo body $ <img> src http://google.com url join / appendTo body url startsWith https:// $ <img> src url appendTo body $ <img> src url appendTo body window open location hash substr 1 navigation navigate location hash substr 1 |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | enclosingFunctionName | urlStuff |
| autogenerated/Xss/DomBasedXss/tst.js:491:44:491:44 | 1 | fileImports | ansi-to-html |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:1:0 | this | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:30:2 | (functi ...   )\\t\\n}) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:30:2 | (functi ...   )\\t\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:1:30:2 | (functi ...   )\\t\\n}) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:1:1 | this | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:1:1 | this | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:1:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | exceptional return of anonymous function | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | functio ... \\n  )\\t\\n} | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | functio ... \\n  )\\t\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | functio ... \\n  )\\t\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | return of anonymous function | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | return of anonymous function | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:1:2:30:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:2:19 | autocompleter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:2:19 | autocompleter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:2:19 | autocompleter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:2:19 | autocompleter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:2:19 | autocompleter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocom ... rl\\n  }) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocom ... rl\\n  }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocom ... rl\\n  }) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocom ... rl\\n  }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocom ... rl\\n  }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocompleter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocompleter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocompleter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocompleter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:7:4:4 | autocompleter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | exceptional return of new Blo ... rl\\n  }) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | exceptional return of new Blo ... rl\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | exceptional return of new Blo ... rl\\n  }) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | exceptional return of new Blo ... rl\\n  }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | exceptional return of new Blo ... rl\\n  }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | new Blo ... rl\\n  }) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | new Blo ... rl\\n  }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | new Blo ... rl\\n  }) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | new Blo ... rl\\n  }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:23:4:4 | new Blo ... rl\\n  }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:27:2:36 | Bloodhound | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:27:2:36 | Bloodhound | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:27:2:36 | Bloodhound | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:27:2:36 | Bloodhound | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:27:2:36 | Bloodhound | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | CalleeFlexibleAccessPath | Bloodhound |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:2:38:4:3 | {\\n    p ... Url\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:12 | prefetch | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:12 | prefetch | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:12 | prefetch | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:12 | prefetch | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:12 | prefetch | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:5:3:23 | prefetch: remoteUrl | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | CalleeFlexibleAccessPath | Bloodhound |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | InputAccessPathFromCallee | ?.prefetch |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | assignedToPropName | prefetch |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:3:15:3:23 | remoteUrl | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:15 | autocompleter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:15 | autocompleter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:15 | autocompleter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:15 | autocompleter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:15 | autocompleter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:26 | autocom ... tialize | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:26 | autocom ... tialize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:26 | autocom ... tialize | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:26 | autocom ... tialize | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:26 | autocom ... tialize | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | autocom ... alize() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | autocom ... alize() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | autocom ... alize() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | autocom ... alize() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | autocom ... alize() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | exceptional return of autocom ... alize() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | exceptional return of autocom ... alize() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | exceptional return of autocom ... alize() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | exceptional return of autocom ... alize() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:3:5:28 | exceptional return of autocom ... alize() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:17:5:26 | initialize | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:17:5:26 | initialize | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:17:5:26 | initialize | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:17:5:26 | initialize | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:5:17:5:26 | initialize | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:3 | $ | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:3 | $ | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | $('.typeahead') | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | $('.typeahead') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | $('.typeahead') | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | $('.typeahead') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | $('.typeahead') | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | exceptional return of $('.typeahead') | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | exceptional return of $('.typeahead') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | exceptional return of $('.typeahead') | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | exceptional return of $('.typeahead') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:17 | exceptional return of $('.typeahead') | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:27 | $('.typ ... peahead | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:27 | $('.typ ... peahead | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:27 | $('.typ ... peahead | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:27 | $('.typ ... peahead | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:6:27 | $('.typ ... peahead | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | $('.typ ...  }\\n  }) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | $('.typ ...  }\\n  }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | $('.typ ...  }\\n  }) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | $('.typ ...  }\\n  }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | $('.typ ...  }\\n  }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | exceptional return of $('.typ ...  }\\n  }) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | exceptional return of $('.typ ...  }\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | exceptional return of $('.typ ...  }\\n  }) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | exceptional return of $('.typ ...  }\\n  }) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:3:13:4 | exceptional return of $('.typ ...  }\\n  }) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:5:6:16 | '.typeahead' | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:19:6:27 | typeahead | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:19:6:27 | typeahead | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:19:6:27 | typeahead | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:19:6:27 | typeahead | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:19:6:27 | typeahead | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:29:6:30 | {} | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:6:33:13:3 | {\\n    s ...   }\\n  } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:10 | source | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:10 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:10 | source | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:10 | source | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:10 | source | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:5:7:37 | source: ... apter() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:25 | autocompleter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:25 | autocompleter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:25 | autocompleter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:25 | autocompleter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:25 | autocompleter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:35 | autocom ... Adapter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:35 | autocom ... Adapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:35 | autocom ... Adapter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:35 | autocom ... Adapter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:35 | autocom ... Adapter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | InputAccessPathFromCallee | 1.source |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | assignedToPropName | source |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | autocom ... apter() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | exceptional return of autocom ... apter() | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | exceptional return of autocom ... apter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | exceptional return of autocom ... apter() | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | exceptional return of autocom ... apter() | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:13:7:37 | exceptional return of autocom ... apter() | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:27:7:35 | ttAdapter | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:27:7:35 | ttAdapter | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:27:7:35 | ttAdapter | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:27:7:35 | ttAdapter | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:7:27:7:35 | ttAdapter | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:8:13 | templates | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:8:13 | templates | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:8:13 | templates | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:8:13 | templates | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:8:13 | templates | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:5:12:5 | templat ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | InputAccessPathFromCallee | 1.templates |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | assignedToPropName | templates |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:8:16:12:5 | {\\n      ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:9:16 | suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:9:16 | suggestion | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:9:16 | suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:9:16 | suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:9:16 | suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:7:11:7 | suggest ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:9:18 | this | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:9:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:9:18 | this | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:9:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:9:18 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | 'arguments' object of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | 'arguments' object of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | 'arguments' object of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | 'arguments' object of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | 'arguments' object of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | exceptional return of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | exceptional return of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | exceptional return of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | exceptional return of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | exceptional return of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | InputAccessPathFromCallee | 1.templates.suggestion |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | assignedToPropName | suggestion |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | contextSurroundingFunctionParameters | ()\n(loc) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | functio ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | return of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | return of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | return of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | return of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:19:11:7 | return of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | contextSurroundingFunctionParameters | ()\n(loc) |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:9:28:9:30 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:10:16:10:18 | loc | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:10:16:10:18 | loc | contextSurroundingFunctionParameters | ()\n(loc) |
| autogenerated/Xss/DomBasedXss/typeahead.js:10:16:10:18 | loc | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:10:16:10:18 | loc | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:10:16:10:18 | loc | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:3 | $ | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:3 | $ | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:3 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | $('.typeahead') | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | $('.typeahead') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | $('.typeahead') | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | $('.typeahead') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | $('.typeahead') | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | exceptional return of $('.typeahead') | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | exceptional return of $('.typeahead') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | exceptional return of $('.typeahead') | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | exceptional return of $('.typeahead') | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:17 | exceptional return of $('.typeahead') | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:27 | $('.typ ... peahead | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:27 | $('.typ ... peahead | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:27 | $('.typ ... peahead | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:27 | $('.typ ... peahead | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:16:27 | $('.typ ... peahead | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | $('.typ ...   }\\n  ) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | $('.typ ...   }\\n  ) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | $('.typ ...   }\\n  ) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | $('.typ ...   }\\n  ) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | $('.typ ...   }\\n  ) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | exceptional return of $('.typ ...   }\\n  ) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | exceptional return of $('.typ ...   }\\n  ) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | exceptional return of $('.typ ...   }\\n  ) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | exceptional return of $('.typ ...   }\\n  ) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:3:29:3 | exceptional return of $('.typ ...   }\\n  ) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:5:16:16 | '.typeahead' | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:19:16:27 | typeahead | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:19:16:27 | typeahead | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:19:16:27 | typeahead | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:19:16:27 | typeahead | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:19:16:27 | typeahead | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:16:29:16:30 | {} | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:17:5:28:5 | {\\n      ... }\\n    } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:10 | name | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:10 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:10 | name | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:10 | name | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:10 | name | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:7:18:24 | name: 'dashboards' | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | InputAccessPathFromCallee | 1.name |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | assignedToPropName | name |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:18:13:18:24 | 'dashboards' | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:19:12 | source | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:19:12 | source | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:19:12 | source | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:19:12 | source | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:19:12 | source | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:7:22:7 | source: ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:19:14 | this | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:19:14 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:19:14 | this | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:19:14 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:19:14 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | 'arguments' object of method source | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | 'arguments' object of method source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | 'arguments' object of method source | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | 'arguments' object of method source | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | 'arguments' object of method source | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | exceptional return of method source | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | exceptional return of method source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | exceptional return of method source | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | exceptional return of method source | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | exceptional return of method source | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | InputAccessPathFromCallee | 1.source |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | assignedToPropName | source |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | functio ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | return of method source | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | return of method source | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | return of method source | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | return of method source | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:15:22:7 | return of method source | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:25:19:29 | query | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:25:19:29 | query | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:25:19:29 | query | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:25:19:29 | query | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:25:19:29 | query | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:19:32:19:33 | cb | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:18 | target | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:18 | target | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:18 | target | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:18 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target  ... .search | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target  ... .search | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target  ... .search | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target  ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:13:20:45 | target  ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:29 | document | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:29 | document | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:29 | document | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:29 | document | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:29 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:38 | document.location | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:38 | document.location | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:38 | document.location | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:38 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:38 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:45 | documen ... .search | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:45 | documen ... .search | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:45 | documen ... .search | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:45 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:22:20:45 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:31:20:38 | location | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:31:20:38 | location | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:31:20:38 | location | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:31:20:38 | location | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:31:20:38 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:40:20:45 | search | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:40:20:45 | search | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:40:20:45 | search | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:40:20:45 | search | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:20:40:20:45 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:10 | cb | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:10 | cb | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:10 | cb | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:10 | cb | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:10 | cb | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | cb(target) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | cb(target) | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | cb(target) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | cb(target) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | cb(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | exceptional return of cb(target) | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | exceptional return of cb(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | exceptional return of cb(target) | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | exceptional return of cb(target) | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:9:21:18 | exceptional return of cb(target) | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | CalleeFlexibleAccessPath | cb |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | contextSurroundingFunctionParameters | ()\n(query, cb) |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:21:12:21:17 | target | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:23:15 | templates | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:23:15 | templates | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:23:15 | templates | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:23:15 | templates | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:23:15 | templates | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:7:27:7 | templat ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | InputAccessPathFromCallee | 1.templates |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | assignedToPropName | templates |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:23:18:27:7 | {\\n      ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:24:18 | suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:24:18 | suggestion | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:24:18 | suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:24:18 | suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:24:18 | suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:9:26:9 | suggest ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:24:20 | this | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:24:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:24:20 | this | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:24:20 | this | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:24:20 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | 'arguments' object of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | 'arguments' object of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | 'arguments' object of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | 'arguments' object of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | 'arguments' object of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | exceptional return of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | exceptional return of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | exceptional return of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | exceptional return of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | exceptional return of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | CalleeFlexibleAccessPath | $().typeahead |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | InputAccessPathFromCallee | 1.templates.suggestion |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | assignedToPropName | suggestion |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | contextSurroundingFunctionParameters | ()\n(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | functio ...       } | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | return of method suggestion | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | return of method suggestion | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | return of method suggestion | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | return of method suggestion | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:21:26:9 | return of method suggestion | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | contextSurroundingFunctionParameters | ()\n(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:24:30:24:32 | val | fileImports |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:25:18:25:20 | val | contextFunctionInterfaces | source(query, cb)\nsuggestion(loc)\nsuggestion(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:25:18:25:20 | val | contextSurroundingFunctionParameters | ()\n(val) |
| autogenerated/Xss/DomBasedXss/typeahead.js:25:18:25:20 | val | enclosingFunctionBody | autocompleter Bloodhound prefetch remoteUrl autocompleter initialize $ .typeahead typeahead source autocompleter ttAdapter templates suggestion loc loc $ .typeahead typeahead name dashboards source query cb target document location search cb target templates suggestion val val |
| autogenerated/Xss/DomBasedXss/typeahead.js:25:18:25:20 | val | enclosingFunctionName |  |
| autogenerated/Xss/DomBasedXss/typeahead.js:25:18:25:20 | val | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | 'arguments' object of function test | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | 'arguments' object of function test | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | exceptional return of function test | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | exceptional return of function test | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | return of function test | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | return of function test | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:1:22:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:10:1:13 | test | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:10:1:13 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:1:10:1:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:12 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:12 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:12 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:12 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:12 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted ... .search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted ... .search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:6:2:39 | tainted ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:23 | document | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:23 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:23 | document | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:23 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:23 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:32 | document.location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:32 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:32 | document.location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:32 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:32 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:39 | documen ... .search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:39 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:39 | documen ... .search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:39 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:16:2:39 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:25:2:32 | location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:25:2:32 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:25:2:32 | location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:25:2:32 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:25:2:32 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:34:2:39 | search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:34:2:39 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:34:2:39 | search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:34:2:39 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:2:34:2:39 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | $("<div ... /div>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | $("<div ... /div>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | $("<div ... /div>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | $("<div ... /div>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | $("<div ... /div>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | exceptional return of $("<div ... /div>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | exceptional return of $("<div ... /div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | exceptional return of $("<div ... /div>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | exceptional return of $("<div ... /div>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:2:4:32 | exceptional return of $("<div ... /div>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:10 | "<div>" | stringConcatenatedWith |  -endpoint- tainted + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:20 | "<div>" + tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:20 | "<div>" + tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:20 | "<div>" + tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:20 | "<div>" + tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:20 | "<div>" + tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:4:4:31 | "<div>" ... </div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:14:4:20 | tainted | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:4:24:4:31 | "</div>" | stringConcatenatedWith | '<div>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | $(`<div ... /div>`) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | $(`<div ... /div>`) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | $(`<div ... /div>`) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | $(`<div ... /div>`) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | $(`<div ... /div>`) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | exceptional return of $(`<div ... /div>`) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | exceptional return of $(`<div ... /div>`) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | exceptional return of $(`<div ... /div>`) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | exceptional return of $(`<div ... /div>`) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:2:5:27 | exceptional return of $(`<div ... /div>`) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:4:5:26 | `<div>$ ... </div>` | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:5:5:9 | <div> | stringConcatenatedWith |  -endpoint- tainted + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:12:5:18 | tainted | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:5:20:5:25 | </div> | stringConcatenatedWith | '<div>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | $("<div ... div>")) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | $("<div ... div>")) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | $("<div ... div>")) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | $("<div ... div>")) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | $("<div ... div>")) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | exceptional return of $("<div ... div>")) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | exceptional return of $("<div ... div>")) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | exceptional return of $("<div ... div>")) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | exceptional return of $("<div ... div>")) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:2:6:44 | exceptional return of $("<div ... div>")) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:10 | "<div>" | stringConcatenatedWith |  -endpoint- tainted + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:17 | "<div>".concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:17 | "<div>".concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:17 | "<div>".concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:17 | "<div>".concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:17 | "<div>".concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | "<div>" ... ainted) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | "<div>" ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | "<div>" ... ainted) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | "<div>" ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | "<div>" ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | exceptional return of "<div>" ... ainted) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | exceptional return of "<div>" ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | exceptional return of "<div>" ... ainted) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | exceptional return of "<div>" ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:26 | exceptional return of "<div>" ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:33 | "<div>" ... .concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:33 | "<div>" ... .concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:33 | "<div>" ... .concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:33 | "<div>" ... .concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:33 | "<div>" ... .concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | "<div>" ... /div>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | exceptional return of "<div>" ... /div>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | exceptional return of "<div>" ... /div>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | exceptional return of "<div>" ... /div>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | exceptional return of "<div>" ... /div>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:4:6:43 | exceptional return of "<div>" ... /div>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:12:6:17 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:12:6:17 | concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:12:6:17 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:12:6:17 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:12:6:17 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:19:6:25 | tainted | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:28:6:33 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:28:6:33 | concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:28:6:33 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:28:6:33 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:28:6:33 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | CalleeFlexibleAccessPath | ?.concat().concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:6:35:6:42 | "</div>" | stringConcatenatedWith | '<div>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | $(["<di ... join()) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | $(["<di ... join()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | $(["<di ... join()) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | $(["<di ... join()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | $(["<di ... join()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | exceptional return of $(["<di ... join()) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | exceptional return of $(["<di ... join()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | exceptional return of $(["<di ... join()) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | exceptional return of $(["<di ... join()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:2:7:39 | exceptional return of $(["<di ... join()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:31 | ["<div> ... /div>"] | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:31 | ["<div> ... /div>"] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:31 | ["<div> ... /div>"] | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:31 | ["<div> ... /div>"] | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:31 | ["<div> ... /div>"] | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:36 | ["<div> ... "].join | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:36 | ["<div> ... "].join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:36 | ["<div> ... "].join | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:36 | ["<div> ... "].join | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:36 | ["<div> ... "].join | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | ["<div> ... .join() | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | exceptional return of ["<div> ... .join() | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | exceptional return of ["<div> ... .join() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | exceptional return of ["<div> ... .join() | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | exceptional return of ["<div> ... .join() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:4:7:38 | exceptional return of ["<div> ... .join() | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:5:7:11 | "<div>" | stringConcatenatedWith |  -endpoint- tainted + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:14:7:20 | tainted | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:23:7:30 | "</div>" | stringConcatenatedWith | '<div>' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:33:7:36 | join | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:33:7:36 | join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:33:7:36 | join | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:33:7:36 | join | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:7:33:7:36 | join | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | $("<div ... "\\"/>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | $("<div ... "\\"/>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | $("<div ... "\\"/>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | $("<div ... "\\"/>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | $("<div ... "\\"/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | exceptional return of $("<div ... "\\"/>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | exceptional return of $("<div ... "\\"/>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | exceptional return of $("<div ... "\\"/>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | exceptional return of $("<div ... "\\"/>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:2:9:35 | exceptional return of $("<div ... "\\"/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:15 | "<div id=\\"" | stringConcatenatedWith |  -endpoint- tainted + '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:25 | "<div i ... tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:25 | "<div i ... tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:25 | "<div i ... tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:25 | "<div i ... tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:25 | "<div i ... tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:4:9:34 | "<div i ...  "\\"/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:19:9:25 | tainted | stringConcatenatedWith | '<div id="' -endpoint- '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:9:29:9:34 | "\\"/>" | stringConcatenatedWith | '<div id="' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | $(`<div ... d}"/>`) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | $(`<div ... d}"/>`) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | $(`<div ... d}"/>`) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | $(`<div ... d}"/>`) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | $(`<div ... d}"/>`) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | exceptional return of $(`<div ... d}"/>`) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | exceptional return of $(`<div ... d}"/>`) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | exceptional return of $(`<div ... d}"/>`) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | exceptional return of $(`<div ... d}"/>`) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:2:10:28 | exceptional return of $(`<div ... d}"/>`) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:4:10:27 | `<div i ... ed}"/>` | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:5:10:13 | <div id=" | stringConcatenatedWith |  -endpoint- tainted + '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:16:10:22 | tainted | stringConcatenatedWith | '<div id="' -endpoint- '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:10:24:10:26 | "/> | stringConcatenatedWith | '<div id="' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | $("<div ... ("/>")) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | $("<div ... ("/>")) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | $("<div ... ("/>")) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | $("<div ... ("/>")) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | $("<div ... ("/>")) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | exceptional return of $("<div ... ("/>")) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | exceptional return of $("<div ... ("/>")) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | exceptional return of $("<div ... ("/>")) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | exceptional return of $("<div ... ("/>")) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:2:11:45 | exceptional return of $("<div ... ("/>")) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:15 | "<div id=\\"" | stringConcatenatedWith |  -endpoint- tainted + '/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:22 | "<div id=\\"".concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:22 | "<div id=\\"".concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:22 | "<div id=\\"".concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:22 | "<div id=\\"".concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:22 | "<div id=\\"".concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | "<div i ... ainted) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | "<div i ... ainted) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | "<div i ... ainted) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | "<div i ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | "<div i ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | exceptional return of "<div i ... ainted) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | exceptional return of "<div i ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | exceptional return of "<div i ... ainted) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | exceptional return of "<div i ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:31 | exceptional return of "<div i ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:38 | "<div i ... .concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:38 | "<div i ... .concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:38 | "<div i ... .concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:38 | "<div i ... .concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:38 | "<div i ... .concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | "<div i ... t("/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | exceptional return of "<div i ... t("/>") | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | exceptional return of "<div i ... t("/>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | exceptional return of "<div i ... t("/>") | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | exceptional return of "<div i ... t("/>") | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:4:11:44 | exceptional return of "<div i ... t("/>") | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:17:11:22 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:17:11:22 | concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:17:11:22 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:17:11:22 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:17:11:22 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:24:11:30 | tainted | stringConcatenatedWith | '<div id="' -endpoint- '/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:33:11:38 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:33:11:38 | concat | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:33:11:38 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:33:11:38 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:33:11:38 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | CalleeFlexibleAccessPath | ?.concat().concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:11:40:11:43 | "/>" | stringConcatenatedWith | '<div id="' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | $(["<di ... join()) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | $(["<di ... join()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | $(["<di ... join()) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | $(["<di ... join()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | $(["<di ... join()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | exceptional return of $(["<di ... join()) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | exceptional return of $(["<di ... join()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | exceptional return of $(["<di ... join()) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | exceptional return of $(["<di ... join()) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:2:12:42 | exceptional return of $(["<di ... join()) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:34 | ["<div  ... "\\"/>"] | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:34 | ["<div  ... "\\"/>"] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:34 | ["<div  ... "\\"/>"] | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:34 | ["<div  ... "\\"/>"] | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:34 | ["<div  ... "\\"/>"] | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:39 | ["<div  ... "].join | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:39 | ["<div  ... "].join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:39 | ["<div  ... "].join | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:39 | ["<div  ... "].join | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:39 | ["<div  ... "].join | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | ["<div  ... .join() | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | exceptional return of ["<div  ... .join() | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | exceptional return of ["<div  ... .join() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | exceptional return of ["<div  ... .join() | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | exceptional return of ["<div  ... .join() | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:4:12:41 | exceptional return of ["<div  ... .join() | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:5:12:16 | "<div id=\\"" | stringConcatenatedWith |  -endpoint- tainted + '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:19:12:25 | tainted | stringConcatenatedWith | '<div id="' -endpoint- '"/>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:28:12:33 | "\\"/>" | stringConcatenatedWith | '<div id="' + tainted -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:36:12:39 | join | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:36:12:39 | join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:36:12:39 | join | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:36:12:39 | join | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:12:36:12:39 | join | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:14:1 | this | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:14:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:14:1 | this | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:14:1 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:14:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | 'arguments' object of function indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | 'arguments' object of function indirection1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | 'arguments' object of function indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | 'arguments' object of function indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | 'arguments' object of function indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | exceptional return of function indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | exceptional return of function indirection1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | exceptional return of function indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | exceptional return of function indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | exceptional return of function indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | functio ... v>';\\n\\t} | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | functio ... v>';\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | functio ... v>';\\n\\t} | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | functio ... v>';\\n\\t} | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | functio ... v>';\\n\\t} | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | return of function indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | return of function indirection1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | return of function indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | return of function indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:2:16:2 | return of function indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:11:14:22 | indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:14:24:14:28 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:23 | '<div align="' | stringConcatenatedWith |  -endpoint- 'left' + '">' + content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:55 | '<div a ... 'left') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:55 | '<div a ... 'left') | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:55 | '<div a ... 'left') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:55 | '<div a ... 'left') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:55 | '<div a ... 'left') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:62 | '<div a ...  + '">' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:62 | '<div a ...  + '">' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:62 | '<div a ...  + '">' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:62 | '<div a ...  + '">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:62 | '<div a ...  + '">' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:72 | '<div a ... content | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:72 | '<div a ... content | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:72 | '<div a ... content | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:72 | '<div a ... content | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:72 | '<div a ... content | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:83 | '<div a ... </div>' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:83 | '<div a ... </div>' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:83 | '<div a ... </div>' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:83 | '<div a ... </div>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:10:15:83 | '<div a ... </div>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:27:15:55 | (attrs. ... 'left') | stringConcatenatedWith | '<div align="' -endpoint- '">' + content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:32 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:32 | attrs | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:32 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:32 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:32 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:44 | attrs.defaultattr | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:44 | attrs.defaultattr | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:44 | attrs.defaultattr | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:44 | attrs.defaultattr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:44 | attrs.defaultattr | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:54 | attrs.d ...  'left' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:54 | attrs.d ...  'left' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:54 | attrs.d ...  'left' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:54 | attrs.d ...  'left' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:28:15:54 | attrs.d ...  'left' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:34:15:44 | defaultattr | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:34:15:44 | defaultattr | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:34:15:44 | defaultattr | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:34:15:44 | defaultattr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:34:15:44 | defaultattr | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:49:15:54 | 'left' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:49:15:54 | 'left' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:49:15:54 | 'left' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:49:15:54 | 'left' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:49:15:54 | 'left' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:59:15:62 | '">' | stringConcatenatedWith | '<div align="' + 'left' -endpoint- content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:66:15:72 | content | stringConcatenatedWith | '<div align="' + 'left' + '">' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:15:76:15:83 | '</div>' | stringConcatenatedWith | '<div align="' + 'left' + '">' + content -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:17:1 | this | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:17:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:17:1 | this | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:17:1 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:17:1 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | 'arguments' object of function indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | 'arguments' object of function indirection2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | 'arguments' object of function indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | 'arguments' object of function indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | 'arguments' object of function indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | exceptional return of function indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | exceptional return of function indirection2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | exceptional return of function indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | exceptional return of function indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | exceptional return of function indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | functio ... >');\\n\\t} | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | functio ... >');\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | functio ... >');\\n\\t} | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | functio ... >');\\n\\t} | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | functio ... >');\\n\\t} | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | return of function indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | return of function indirection2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | return of function indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | return of function indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:2:19:2 | return of function indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:11:17:22 | indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:17:24:17:28 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:23 | '<div align="' | stringConcatenatedWith |  -endpoint- 'left' + '">' + content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:30 | '<div a ... .concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:30 | '<div a ... .concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:30 | '<div a ... .concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:30 | '<div a ... .concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:30 | '<div a ... .concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | '<div a ... 'left') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | '<div a ... 'left') | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | '<div a ... 'left') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | '<div a ... 'left') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | '<div a ... 'left') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | exceptional return of '<div a ... 'left') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | exceptional return of '<div a ... 'left') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | exceptional return of '<div a ... 'left') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | exceptional return of '<div a ... 'left') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:59 | exceptional return of '<div a ... 'left') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:66 | '<div a ... .concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:66 | '<div a ... .concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:66 | '<div a ... .concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:66 | '<div a ... .concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:66 | '<div a ... .concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | '<div a ... ntent)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | '<div a ... ntent)) | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | '<div a ... ntent)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | '<div a ... ntent)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | '<div a ... ntent)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | exceptional return of '<div a ... ntent)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | exceptional return of '<div a ... ntent)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | exceptional return of '<div a ... ntent)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | exceptional return of '<div a ... ntent)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:88 | exceptional return of '<div a ... ntent)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:95 | '<div a ... .concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:95 | '<div a ... .concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:95 | '<div a ... .concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:95 | '<div a ... .concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:95 | '<div a ... .concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | '<div a ... /div>') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | '<div a ... /div>') | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | '<div a ... /div>') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | '<div a ... /div>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | '<div a ... /div>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | exceptional return of '<div a ... /div>') | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | exceptional return of '<div a ... /div>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | exceptional return of '<div a ... /div>') | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | exceptional return of '<div a ... /div>') | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:10:18:105 | exceptional return of '<div a ... /div>') | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:25:18:30 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:25:18:30 | concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:25:18:30 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:25:18:30 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:25:18:30 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:36 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:36 | attrs | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:36 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:36 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:36 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:48 | attrs.defaultattr | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:48 | attrs.defaultattr | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:48 | attrs.defaultattr | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:48 | attrs.defaultattr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:48 | attrs.defaultattr | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:32:18:58 | attrs.d ...  'left' | stringConcatenatedWith | '<div align="' -endpoint- '">' + content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:38:18:48 | defaultattr | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:38:18:48 | defaultattr | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:38:18:48 | defaultattr | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:38:18:48 | defaultattr | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:38:18:48 | defaultattr | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:53:18:58 | 'left' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:53:18:58 | 'left' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:53:18:58 | 'left' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:53:18:58 | 'left' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:53:18:58 | 'left' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:61:18:66 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:61:18:66 | concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:61:18:66 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:61:18:66 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:61:18:66 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:71 | '">' | stringConcatenatedWith | '<div align="' + 'left' -endpoint- content + '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:78 | '">'.concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:78 | '">'.concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:78 | '">'.concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:78 | '">'.concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:78 | '">'.concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | CalleeFlexibleAccessPath | ?.concat().concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | '">'.concat(content) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | exceptional return of '">'.concat(content) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | exceptional return of '">'.concat(content) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | exceptional return of '">'.concat(content) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | exceptional return of '">'.concat(content) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:68:18:87 | exceptional return of '">'.concat(content) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:73:18:78 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:73:18:78 | concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:73:18:78 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:73:18:78 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:73:18:78 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | CalleeFlexibleAccessPath | ?.concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:80:18:86 | content | stringConcatenatedWith | '<div align="' + 'left' + '">' -endpoint- '</div>' |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:90:18:95 | concat | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:90:18:95 | concat | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:90:18:95 | concat | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:90:18:95 | concat | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:90:18:95 | concat | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | CalleeFlexibleAccessPath | ?.concat().concat().concat |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | contextSurroundingFunctionParameters | (attrs) |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:18:97:18:104 | '</div>' | stringConcatenatedWith | '<div align="' + 'left' + '">' + content -endpoint-  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | $(indir ... attrs)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | $(indir ... attrs)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | $(indir ... attrs)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | $(indir ... attrs)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | $(indir ... attrs)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | exceptional return of $(indir ... attrs)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | exceptional return of $(indir ... attrs)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | exceptional return of $(indir ... attrs)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | exceptional return of $(indir ... attrs)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:2:20:48 | exceptional return of $(indir ... attrs)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:15 | indirection1 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:15 | indirection1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:15 | indirection1 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:15 | indirection1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:15 | indirection1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | exceptional return of indirec ... .attrs) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | exceptional return of indirec ... .attrs) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | exceptional return of indirec ... .attrs) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | exceptional return of indirec ... .attrs) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | exceptional return of indirec ... .attrs) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:4:20:47 | indirec ... .attrs) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:24 | document | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:24 | document | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:24 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:33 | document.location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:33 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:33 | document.location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:33 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:33 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:40 | documen ... .search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:40 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:40 | documen ... .search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:40 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:40 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | CalleeFlexibleAccessPath | indirection1 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:17:20:46 | documen ... h.attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:26:20:33 | location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:26:20:33 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:26:20:33 | location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:26:20:33 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:26:20:33 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:35:20:40 | search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:35:20:40 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:35:20:40 | search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:35:20:40 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:35:20:40 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:42:20:46 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:42:20:46 | attrs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:42:20:46 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:42:20:46 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:20:42:20:46 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:2 | $ | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:2 | $ | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:2 | $ | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:2 | $ | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | $(indir ... attrs)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | $(indir ... attrs)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | $(indir ... attrs)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | $(indir ... attrs)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | $(indir ... attrs)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | exceptional return of $(indir ... attrs)) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | exceptional return of $(indir ... attrs)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | exceptional return of $(indir ... attrs)) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | exceptional return of $(indir ... attrs)) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:2:21:48 | exceptional return of $(indir ... attrs)) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:15 | indirection2 | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:15 | indirection2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:15 | indirection2 | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:15 | indirection2 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:15 | indirection2 | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | exceptional return of indirec ... .attrs) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | exceptional return of indirec ... .attrs) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | exceptional return of indirec ... .attrs) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | exceptional return of indirec ... .attrs) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | exceptional return of indirec ... .attrs) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:4:21:47 | indirec ... .attrs) | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:24 | document | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:24 | document | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:24 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:33 | document.location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:33 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:33 | document.location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:33 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:33 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:40 | documen ... .search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:40 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:40 | documen ... .search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:40 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:40 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | CalleeFlexibleAccessPath | indirection2 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:17:21:46 | documen ... h.attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:26:21:33 | location | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:26:21:33 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:26:21:33 | location | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:26:21:33 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:26:21:33 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:35:21:40 | search | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:35:21:40 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:35:21:40 | search | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:35:21:40 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:35:21:40 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:42:21:46 | attrs | contextFunctionInterfaces | indirection1(attrs)\nindirection2(attrs)\ntest() |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:42:21:46 | attrs | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:42:21:46 | attrs | enclosingFunctionBody | tainted document location search $ <div> tainted </div> $ <div> tainted </div> $ <div> concat tainted concat </div> $ <div> tainted </div> join $ <div id=" tainted "/> $ <div id=" tainted "/> $ <div id=" concat tainted concat /> $ <div id=" tainted "/> join indirection1 attrs <div align=" attrs defaultattr left "> content </div> indirection2 attrs <div align=" concat attrs defaultattr left concat "> concat content concat </div> $ indirection1 document location search attrs $ indirection2 document location search attrs |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:42:21:46 | attrs | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/various-concat-obfuscations.js:21:42:21:46 | attrs | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | 'arguments' object of function test | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | 'arguments' object of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | 'arguments' object of function test | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | 'arguments' object of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | 'arguments' object of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | exceptional return of function test | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | exceptional return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | exceptional return of function test | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | exceptional return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | exceptional return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | functio ... ted);\\n} | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | functio ... ted);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | functio ... ted);\\n} | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | return of function test | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | return of function test | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | return of function test | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | return of function test | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:1:5:1 | return of function test | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:10:1:13 | test | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:10:1:13 | test | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:10:1:13 | test | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:1:15:1:17 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:13 | tainted | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:13 | tainted | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:13 | tainted | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:13 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:13 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted ... ring(1) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted ... ring(1) | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted ... ring(1) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted ... ring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:7:2:53 | tainted ... ring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:24 | document | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:24 | document | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:24 | document | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:24 | document | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:24 | document | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:33 | document.location | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:33 | document.location | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:33 | document.location | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:33 | document.location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:33 | document.location | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:40 | documen ... .search | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:40 | documen ... .search | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:40 | documen ... .search | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:40 | documen ... .search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:40 | documen ... .search | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:50 | documen ... bstring | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:50 | documen ... bstring | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:50 | documen ... bstring | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:50 | documen ... bstring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:50 | documen ... bstring | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | documen ... ring(1) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | documen ... ring(1) | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | documen ... ring(1) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | documen ... ring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | documen ... ring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | exceptional return of documen ... ring(1) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | exceptional return of documen ... ring(1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | exceptional return of documen ... ring(1) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | exceptional return of documen ... ring(1) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:17:2:53 | exceptional return of documen ... ring(1) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:26:2:33 | location | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:26:2:33 | location | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:26:2:33 | location | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:26:2:33 | location | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:26:2:33 | location | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:35:2:40 | search | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:35:2:40 | search | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:35:2:40 | search | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:35:2:40 | search | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:35:2:40 | search | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:42:2:50 | substring | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:42:2:50 | substring | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:42:2:50 | substring | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:42:2:50 | substring | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:42:2:50 | substring | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | CalleeFlexibleAccessPath | document.location.search.substring |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:2:52:2:52 | 1 | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:7 | WinJS | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:7 | WinJS | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:7 | WinJS | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:7 | WinJS | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:7 | WinJS | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:17 | WinJS.Utilities | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:17 | WinJS.Utilities | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:17 | WinJS.Utilities | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:17 | WinJS.Utilities | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:17 | WinJS.Utilities | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:36 | WinJS.U ... LUnsafe | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:36 | WinJS.U ... LUnsafe | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:36 | WinJS.U ... LUnsafe | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:36 | WinJS.U ... LUnsafe | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:36 | WinJS.U ... LUnsafe | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | WinJS.U ... ainted) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | WinJS.U ... ainted) | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | WinJS.U ... ainted) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | WinJS.U ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | WinJS.U ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | exceptional return of WinJS.U ... ainted) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | exceptional return of WinJS.U ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | exceptional return of WinJS.U ... ainted) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | exceptional return of WinJS.U ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:3:3:50 | exceptional return of WinJS.U ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:9:3:17 | Utilities | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:9:3:17 | Utilities | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:9:3:17 | Utilities | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:9:3:17 | Utilities | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:9:3:17 | Utilities | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:19:3:36 | setInnerHTMLUnsafe | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:19:3:36 | setInnerHTMLUnsafe | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:19:3:36 | setInnerHTMLUnsafe | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:19:3:36 | setInnerHTMLUnsafe | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:19:3:36 | setInnerHTMLUnsafe | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | CalleeFlexibleAccessPath | WinJS.Utilities.setInnerHTMLUnsafe |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:38:3:40 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | CalleeFlexibleAccessPath | WinJS.Utilities.setInnerHTMLUnsafe |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:3:43:3:49 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:7 | WinJS | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:7 | WinJS | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:7 | WinJS | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:7 | WinJS | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:7 | WinJS | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:17 | WinJS.Utilities | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:17 | WinJS.Utilities | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:17 | WinJS.Utilities | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:17 | WinJS.Utilities | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:17 | WinJS.Utilities | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:36 | WinJS.U ... LUnsafe | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:36 | WinJS.U ... LUnsafe | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:36 | WinJS.U ... LUnsafe | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:36 | WinJS.U ... LUnsafe | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:36 | WinJS.U ... LUnsafe | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | WinJS.U ... ainted) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | WinJS.U ... ainted) | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | WinJS.U ... ainted) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | WinJS.U ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | WinJS.U ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | exceptional return of WinJS.U ... ainted) | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | exceptional return of WinJS.U ... ainted) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | exceptional return of WinJS.U ... ainted) | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | exceptional return of WinJS.U ... ainted) | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:3:4:50 | exceptional return of WinJS.U ... ainted) | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:9:4:17 | Utilities | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:9:4:17 | Utilities | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:9:4:17 | Utilities | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:9:4:17 | Utilities | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:9:4:17 | Utilities | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:19:4:36 | setOuterHTMLUnsafe | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:19:4:36 | setOuterHTMLUnsafe | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:19:4:36 | setOuterHTMLUnsafe | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:19:4:36 | setOuterHTMLUnsafe | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:19:4:36 | setOuterHTMLUnsafe | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | CalleeFlexibleAccessPath | WinJS.Utilities.setOuterHTMLUnsafe |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:38:4:40 | elt | fileImports |  |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | CalleeFlexibleAccessPath | WinJS.Utilities.setOuterHTMLUnsafe |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | contextFunctionInterfaces | test(elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | contextSurroundingFunctionParameters | (elt) |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | enclosingFunctionBody | elt tainted document location search substring 1 WinJS Utilities setInnerHTMLUnsafe elt tainted WinJS Utilities setOuterHTMLUnsafe elt tainted |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | enclosingFunctionName | test |
| autogenerated/Xss/DomBasedXss/winjs.js:4:43:4:49 | tainted | fileImports |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:0 | this | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:0 | this | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:1 | $ | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:1 | $ | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | $(document) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | $(document) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | exceptional return of $(document) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:11 | exceptional return of $(document) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:17 | $(document).ready | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:17 | $(document).ready | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:1:17 | $(document).ready | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | $(docum ...    }\\n}) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | $(docum ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | $(docum ...    }\\n}) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | exceptional return of $(docum ...    }\\n}) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | exceptional return of $(docum ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:1:16:2 | exceptional return of $(docum ...    }\\n}) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:3:1:10 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:3:1:10 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:3:1:10 | document | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:3:1:10 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:3:1:10 | document | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:13:1:17 | ready | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:13:1:17 | ready | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:13:1:17 | ready | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:18 | this | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:18 | this | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:18 | this | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:18 | this | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:19 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:19 | xhr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:19 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:19 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:1:19 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | 'arguments' object of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | 'arguments' object of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | exceptional return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | exceptional return of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | exceptional return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | exceptional return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | functio ...     }\\n} | CalleeFlexibleAccessPath | $().ready |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | functio ...     }\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | functio ...     }\\n} | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | functio ...     }\\n} | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | return of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:1:19:16:1 | return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:11 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr = n ... quest() | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr = n ... quest() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr = n ... quest() | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr = n ... quest() | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:9:2:34 | xhr = n ... quest() | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | exceptional return of new XMLHttpRequest() | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | exceptional return of new XMLHttpRequest() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | exceptional return of new XMLHttpRequest() | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | exceptional return of new XMLHttpRequest() | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | exceptional return of new XMLHttpRequest() | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | new XMLHttpRequest() | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | new XMLHttpRequest() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | new XMLHttpRequest() | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | new XMLHttpRequest() | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:15:2:34 | new XMLHttpRequest() | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:19:2:32 | XMLHttpRequest | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:19:2:32 | XMLHttpRequest | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:19:2:32 | XMLHttpRequest | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:19:2:32 | XMLHttpRequest | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:2:19:2:32 | XMLHttpRequest | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:11 | url | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:11 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:11 | url | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:11 | url | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:11 | url | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url = " ... url }}" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url = " ... url }}" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url = " ... url }}" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url = " ... url }}" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:9:3:30 | url = " ... url }}" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:15:3:30 | "{{ some_url }}" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:15:3:30 | "{{ some_url }}" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:15:3:30 | "{{ some_url }}" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:15:3:30 | "{{ some_url }}" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:3:15:3:30 | "{{ some_url }}" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:7 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:7 | xhr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:7 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:7 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:7 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:12 | xhr.open | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:12 | xhr.open | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:12 | xhr.open | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:12 | xhr.open | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:12 | xhr.open | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | exceptional return of xhr.ope ... , true) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | exceptional return of xhr.ope ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | exceptional return of xhr.ope ... , true) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | exceptional return of xhr.ope ... , true) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | exceptional return of xhr.ope ... , true) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | xhr.ope ... , true) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | xhr.ope ... , true) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | xhr.ope ... , true) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | xhr.ope ... , true) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:5:4:30 | xhr.ope ... , true) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:9:4:12 | open | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:9:4:12 | open | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:9:4:12 | open | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:9:4:12 | open | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:9:4:12 | open | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | CalleeFlexibleAccessPath | xhr.open |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:14:4:18 | "GET" | receiverName | xhr |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | CalleeFlexibleAccessPath | xhr.open |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:21:4:23 | url | receiverName | xhr |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | CalleeFlexibleAccessPath | xhr.open |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | InputArgumentIndex | 2 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:4:26:4:29 | true | receiverName | xhr |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:7 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:7 | xhr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:7 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:7 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:7 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:24 | xhr.setRequestHeader | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:24 | xhr.setRequestHeader | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:24 | xhr.setRequestHeader | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:24 | xhr.setRequestHeader | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:24 | xhr.setRequestHeader | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | exceptional return of xhr.set ... /json") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | exceptional return of xhr.set ... /json") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | exceptional return of xhr.set ... /json") | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | exceptional return of xhr.set ... /json") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | exceptional return of xhr.set ... /json") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | xhr.set ... /json") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | xhr.set ... /json") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | xhr.set ... /json") | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | xhr.set ... /json") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:5:5:60 | xhr.set ... /json") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:9:5:24 | setRequestHeader | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:9:5:24 | setRequestHeader | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:9:5:24 | setRequestHeader | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:9:5:24 | setRequestHeader | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:9:5:24 | setRequestHeader | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | CalleeFlexibleAccessPath | xhr.setRequestHeader |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:26:5:39 | "Content-Type" | receiverName | xhr |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | CalleeFlexibleAccessPath | xhr.setRequestHeader |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | InputArgumentIndex | 1 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:5:42:5:59 | "application/json" | receiverName | xhr |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:7 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:7 | xhr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:7 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:7 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:7 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:26 | xhr.onr ... echange | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:26 | xhr.onr ... echange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:26 | xhr.onr ... echange | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:26 | xhr.onr ... echange | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:6:26 | xhr.onr ... echange | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:10:5 | xhr.onr ... s\\n    } | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:10:5 | xhr.onr ... s\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:10:5 | xhr.onr ... s\\n    } | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:10:5 | xhr.onr ... s\\n    } | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:5:10:5 | xhr.onr ... s\\n    } | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:9:6:26 | onreadystatechange | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:9:6:26 | onreadystatechange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:9:6:26 | onreadystatechange | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:9:6:26 | onreadystatechange | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:9:6:26 | onreadystatechange | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | this | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | this | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | this | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | this | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | xhr | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:6:29 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | 'arguments' object of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | 'arguments' object of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | 'arguments' object of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | exceptional return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | exceptional return of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | exceptional return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | exceptional return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | assignedToPropName | onreadystatechange |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | functio ... s\\n    } | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | return of anonymous function | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:6:30:10:5 | return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:15 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:15 | xhr | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:15 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:15 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:15 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:26 | xhr.readyState | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:26 | xhr.readyState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:26 | xhr.readyState | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:26 | xhr.readyState | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:26 | xhr.readyState | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:32 | xhr.readyState !== 4 | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:32 | xhr.readyState !== 4 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:32 | xhr.readyState !== 4 | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:32 | xhr.readyState !== 4 | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:13:7:32 | xhr.readyState !== 4 | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:17:7:26 | readyState | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:17:7:26 | readyState | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:17:7:26 | readyState | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:17:7:26 | readyState | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:17:7:26 | readyState | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:32:7:32 | 4 | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:32:7:32 | 4 | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:32:7:32 | 4 | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:32:7:32 | 4 | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:7:32:7:32 | 4 | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:16 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:16 | json | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:16 | json | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:16 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:16 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json =  ... seText) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json =  ... seText) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json =  ... seText) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json =  ... seText) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:13:8:47 | json =  ... seText) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:23 | JSON | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:23 | JSON | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:23 | JSON | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:23 | JSON | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:23 | JSON | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:29 | JSON.parse | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:29 | JSON.parse | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:29 | JSON.parse | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:29 | JSON.parse | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:29 | JSON.parse | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | JSON.pa ... seText) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | JSON.pa ... seText) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | JSON.pa ... seText) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | JSON.pa ... seText) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | JSON.pa ... seText) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | exceptional return of JSON.pa ... seText) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | exceptional return of JSON.pa ... seText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | exceptional return of JSON.pa ... seText) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | exceptional return of JSON.pa ... seText) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:20:8:47 | exceptional return of JSON.pa ... seText) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:25:8:29 | parse | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:25:8:29 | parse | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:25:8:29 | parse | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:25:8:29 | parse | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:25:8:29 | parse | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:33 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:33 | xhr | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:33 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:33 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:33 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:31:8:46 | xhr.responseText | receiverName | JSON |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:35:8:46 | responseText | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:35:8:46 | responseText | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:35:8:46 | responseText | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:35:8:46 | responseText | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:8:35:8:46 | responseText | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:9 | $ | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:9 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:9 | $ | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:9 | $ | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:9 | $ | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | $("#myThing") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | $("#myThing") | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | $("#myThing") | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | $("#myThing") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | $("#myThing") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | exceptional return of $("#myThing") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | exceptional return of $("#myThing") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | exceptional return of $("#myThing") | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | exceptional return of $("#myThing") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:21 | exceptional return of $("#myThing") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:26 | $("#myThing").html | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:26 | $("#myThing").html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:26 | $("#myThing").html | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:26 | $("#myThing").html | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:26 | $("#myThing").html | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | $("#myT ... essage) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | $("#myT ... essage) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | $("#myT ... essage) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | $("#myT ... essage) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | $("#myT ... essage) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | exceptional return of $("#myT ... essage) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | exceptional return of $("#myT ... essage) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | exceptional return of $("#myT ... essage) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | exceptional return of $("#myT ... essage) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:9:9:40 | exceptional return of $("#myT ... essage) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:11:9:20 | "#myThing" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:23:9:26 | html | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:23:9:26 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:23:9:26 | html | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:23:9:26 | html | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:23:9:26 | html | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:31 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:31 | json | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:31 | json | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:31 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:31 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:28:9:39 | json.message | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:33:9:39 | message | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:33:9:39 | message | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:33:9:39 | message | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:33:9:39 | message | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:9:33:9:39 | message | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:11 | xhr | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:11 | xhr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:11 | xhr | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:11 | xhr | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:11 | xhr | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:16 | xhr.send | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:16 | xhr.send | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:16 | xhr.send | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:16 | xhr.send | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:16 | xhr.send | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | exceptional return of xhr.send() | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | exceptional return of xhr.send() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | exceptional return of xhr.send() | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | exceptional return of xhr.send() | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | exceptional return of xhr.send() | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | xhr.send() | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | xhr.send() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | xhr.send() | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | xhr.send() | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:9:12:18 | xhr.send() | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:13:12:16 | send | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:13:12:16 | send | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:13:12:16 | send | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:13:12:16 | send | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:12:13:12:16 | send | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:13:14:13:18 | error | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:15 | console | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:15 | console | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:15 | console | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:15 | console | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:15 | console | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:19 | console.log | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:19 | console.log | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:19 | console.log | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:19 | console.log | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:19 | console.log | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | console.log(error) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | console.log(error) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | console.log(error) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | console.log(error) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | console.log(error) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | exceptional return of console.log(error) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | exceptional return of console.log(error) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | exceptional return of console.log(error) | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | exceptional return of console.log(error) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:9:14:26 | exceptional return of console.log(error) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:17:14:19 | log | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:17:14:19 | log | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:17:14:19 | log | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:17:14:19 | log | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:17:14:19 | log | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | enclosingFunctionBody | xhr XMLHttpRequest url {{ some_url }} xhr open GET url true xhr setRequestHeader Content-Type application/json xhr onreadystatechange xhr readyState 4 json JSON parse xhr responseText $ #myThing html json message xhr send error console log error |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:14:21:14:25 | error | receiverName | console |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:1 | $ | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:1 | $ | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | $(document) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | $(document) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | exceptional return of $(document) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:11 | exceptional return of $(document) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:17 | $(document).ready | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:17 | $(document).ready | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:18:17 | $(document).ready | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | $(docum ... ces\\n\\n}) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | $(docum ... ces\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | $(docum ... ces\\n\\n}) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | exceptional return of $(docum ... ces\\n\\n}) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | exceptional return of $(docum ... ces\\n\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:1:24:2 | exceptional return of $(docum ... ces\\n\\n}) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:3:18:10 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:3:18:10 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:3:18:10 | document | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:3:18:10 | document | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:3:18:10 | document | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:13:18:17 | ready | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:13:18:17 | ready | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:13:18:17 | ready | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:18:18 | this | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:18:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:18:18 | this | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:18:18 | this | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:18:18 | this | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | 'arguments' object of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | async f ... rces\\n\\n} | CalleeFlexibleAccessPath | $().ready |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | async f ... rces\\n\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | async f ... rces\\n\\n} | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | async f ... rces\\n\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | async f ... rces\\n\\n} | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | exceptional return of anonymous function | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | exceptional return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | exceptional return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | return of anonymous function | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | return of anonymous function | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | return of anonymous function | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:18:19:24:1 | return of anonymous function | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:13 | got | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:13 | got | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:13 | got | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:13 | got | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:13 | got | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got = require('got') | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got = require('got') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got = require('got') | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got = require('got') | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:11:19:30 | got = require('got') | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:23 | require | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:23 | require | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:23 | require | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:23 | require | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:23 | require | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | exceptional return of require('got') | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | exceptional return of require('got') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | exceptional return of require('got') | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | exceptional return of require('got') | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | exceptional return of require('got') | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | require('got') | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | require('got') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | require('got') | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | require('got') | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:17:19:30 | require('got') | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:19:25:19:29 | 'got' | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:14 | resp | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:14 | resp | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:14 | resp | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:14 | resp | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:14 | resp | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp =  ... rl }}") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp =  ... rl }}") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp =  ... rl }}") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp =  ... rl }}") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:11:20:48 | resp =  ... rl }}") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:18:20:48 | await g ... rl }}") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:18:20:48 | await g ... rl }}") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:18:20:48 | await g ... rl }}") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:18:20:48 | await g ... rl }}") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:18:20:48 | await g ... rl }}") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:26 | got | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:26 | got | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:26 | got | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:26 | got | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:26 | got | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:30 | got.get | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:30 | got.get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:30 | got.get | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:30 | got.get | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:30 | got.get | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | exceptional return of got.get ... rl }}") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | exceptional return of got.get ... rl }}") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | exceptional return of got.get ... rl }}") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | exceptional return of got.get ... rl }}") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | exceptional return of got.get ... rl }}") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | got.get ... rl }}") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | got.get ... rl }}") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | got.get ... rl }}") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | got.get ... rl }}") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:24:20:48 | got.get ... rl }}") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:28:20:30 | get | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:28:20:30 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:28:20:30 | get | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:28:20:30 | get | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:28:20:30 | get | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | CalleeFlexibleAccessPath | got.get |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | calleeImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:20:32:20:47 | "{{ some_url }}" | receiverName | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:14 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:14 | json | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:14 | json | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:14 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:14 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json =  ... p.body) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json =  ... p.body) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json =  ... p.body) | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json =  ... p.body) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:11:21:38 | json =  ... p.body) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:21 | JSON | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:21 | JSON | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:21 | JSON | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:21 | JSON | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:21 | JSON | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:27 | JSON.parse | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:27 | JSON.parse | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:27 | JSON.parse | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:27 | JSON.parse | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:27 | JSON.parse | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | JSON.pa ... p.body) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | JSON.pa ... p.body) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | JSON.pa ... p.body) | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | JSON.pa ... p.body) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | JSON.pa ... p.body) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | exceptional return of JSON.pa ... p.body) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | exceptional return of JSON.pa ... p.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | exceptional return of JSON.pa ... p.body) | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | exceptional return of JSON.pa ... p.body) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:18:21:38 | exceptional return of JSON.pa ... p.body) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:23:21:27 | parse | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:23:21:27 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:23:21:27 | parse | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:23:21:27 | parse | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:23:21:27 | parse | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:32 | resp | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:32 | resp | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:32 | resp | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:32 | resp | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:32 | resp | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:29:21:37 | resp.body | receiverName | JSON |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:34:21:37 | body | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:34:21:37 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:34:21:37 | body | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:34:21:37 | body | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:21:34:21:37 | body | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:5 | $ | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:5 | $ | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:5 | $ | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:5 | $ | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | $("#myThing") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | $("#myThing") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | $("#myThing") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | $("#myThing") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | $("#myThing") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | exceptional return of $("#myThing") | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | exceptional return of $("#myThing") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | exceptional return of $("#myThing") | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | exceptional return of $("#myThing") | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:17 | exceptional return of $("#myThing") | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:22 | $("#myThing").html | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:22 | $("#myThing").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:22 | $("#myThing").html | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:22 | $("#myThing").html | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:22 | $("#myThing").html | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | $("#myT ... essage) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | $("#myT ... essage) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | $("#myT ... essage) | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | $("#myT ... essage) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | $("#myT ... essage) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | exceptional return of $("#myT ... essage) | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | exceptional return of $("#myT ... essage) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | exceptional return of $("#myT ... essage) | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | exceptional return of $("#myT ... essage) | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:5:22:36 | exceptional return of $("#myT ... essage) | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:7:22:16 | "#myThing" | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:19:22:22 | html | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:19:22:22 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:19:22:22 | html | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:19:22:22 | html | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:19:22:22 | html | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:27 | json | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:27 | json | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:27 | json | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:27 | json | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:27 | json | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | InputArgumentIndex | 0 |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:24:22:35 | json.message | fileImports | got |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:29:22:35 | message | contextFunctionInterfaces | onreadystatechange() |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:29:22:35 | message | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:29:22:35 | message | enclosingFunctionBody | got require got resp got get {{ some_url }} json JSON parse resp body $ #myThing html json message |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:29:22:35 | message | enclosingFunctionName | ready#functionalargument |
| autogenerated/Xss/DomBasedXss/xmlRequest.js:22:29:22:35 | message | fileImports | got |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:0 | this | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | joiSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | joiSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:1 | require | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:30 | import  ... press'; | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:30 | import  ... press'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:1:1:30 | import  ... press'; | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:8:1:14 | express | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:1:21:1:29 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:21:1:29 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:1:21:1:29 | 'express' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:2:1:2:22 | import  ...  'ajv'; | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:1:2:22 | import  ...  'ajv'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:1:2:22 | import  ...  'ajv'; | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:2:8:2:10 | Ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:2:17:2:21 | 'ajv' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:17:2:21 | 'ajv' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:2:17:2:21 | 'ajv' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:7 | app | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:5:4:19 | app = express() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:17 | express | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | exceptional return of express() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:4:11:4:19 | express() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:7 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:7 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:7 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:7 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv = new Ajv() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv = new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:5:5:19 | ajv = new Ajv() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | exceptional return of new Ajv() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | exceptional return of new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | exceptional return of new Ajv() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | new Ajv() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | new Ajv() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:11:5:19 | new Ajv() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:5:15:5:17 | Ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:15:5:17 | Ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:5:15:5:17 | Ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:3 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:3 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:3 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:13 | ajv.addSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:13 | ajv.addSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:13 | ajv.addSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | ajv.add ... lData') | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | ajv.add ... lData') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | ajv.add ... lData') | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | exceptional return of ajv.add ... lData') | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | exceptional return of ajv.add ... lData') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:1:7:83 | exceptional return of ajv.add ... lData') | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:5:7:13 | addSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:5:7:13 | addSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:5:7:13 | addSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | CalleeFlexibleAccessPath | ajv.addSchema |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | calleeImports | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:15:7:70 | {type:  ... mber'}} | receiverName | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:19 | type | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:19 | type | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:19 | type | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:16:7:29 | type: 'object' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | CalleeFlexibleAccessPath | ajv.addSchema |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | InputAccessPathFromCallee | 0.type |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | assignedToPropName | type |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | calleeImports | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:22:7:29 | 'object' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:51 | additionalProperties | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:51 | additionalProperties | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:51 | additionalProperties | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:32:7:69 | additio ... umber'} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | CalleeFlexibleAccessPath | ajv.addSchema |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | InputAccessPathFromCallee | 0.additionalProperties |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | assignedToPropName | additionalProperties |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | calleeImports | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:54:7:69 | {type: 'number'} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:58 | type | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:58 | type | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:58 | type | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:55:7:68 | type: 'number' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | CalleeFlexibleAccessPath | ajv.addSchema |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | InputAccessPathFromCallee | 0.additionalProperties.type |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | assignedToPropName | type |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | calleeImports | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:61:7:68 | 'number' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | CalleeFlexibleAccessPath | ajv.addSchema |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | calleeImports | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:7:73:7:82 | 'pollData' | receiverName | ajv |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:3 | app | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:9:8 | app.post | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | app.pos ...    }\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | app.pos ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | app.pos ...    }\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | exceptional return of app.pos ...    }\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | exceptional return of app.pos ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:1:13:2 | exceptional return of app.pos ...    }\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:5:9:8 | post | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:5:9:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:5:9:8 | post | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:10:9:20 | '/polldata' | receiverName | app |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:9:22 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:9:22 | ajv | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:9:22 | ajv | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:9:22 | ajv | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:9:22 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | 'arguments' object of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | (req, r ...     }\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | exceptional return of anonymous function | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | exceptional return of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | return of anonymous function | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:23:13:1 | return of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:24:9:26 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:9:29:9:31 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:9:10:43 | !ajv.va ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:9:10:43 | !ajv.va ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:9:10:43 | !ajv.va ... q.body) | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:9:10:43 | !ajv.va ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:9:10:43 | !ajv.va ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:12 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:12 | ajv | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:12 | ajv | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:12 | ajv | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:12 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:21 | ajv.validate | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:21 | ajv.validate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:21 | ajv.validate | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:21 | ajv.validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:21 | ajv.validate | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | ajv.val ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | ajv.val ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | ajv.val ... q.body) | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | ajv.val ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | ajv.val ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | exceptional return of ajv.val ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | exceptional return of ajv.val ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | exceptional return of ajv.val ... q.body) | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | exceptional return of ajv.val ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:10:10:43 | exceptional return of ajv.val ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:14:10:21 | validate | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:14:10:21 | validate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:14:10:21 | validate | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:14:10:21 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:14:10:21 | validate | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:35:10:37 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:35:10:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:35:10:37 | req | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:35:10:37 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:35:10:37 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:10:39:10:42 | body | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:10:39:10:42 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:10:39:10:42 | body | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:10:39:10:42 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:10:39:10:42 | body | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:11 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:11 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:11 | res | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:11 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:11 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:16 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:16 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:16 | res.send | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:16 | res.send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:16 | res.send | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | exceptional return of res.sen ... Text()) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | exceptional return of res.sen ... Text()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | exceptional return of res.sen ... Text()) | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | exceptional return of res.sen ... Text()) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | exceptional return of res.sen ... Text()) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | res.sen ... Text()) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | res.sen ... Text()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | res.sen ... Text()) | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | res.sen ... Text()) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:9:11:34 | res.sen ... Text()) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:13:11:16 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:13:11:16 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:13:11:16 | send | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:13:11:16 | send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:13:11:16 | send | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:20 | ajv | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:20 | ajv | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:20 | ajv | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:20 | ajv | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:20 | ajv | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:31 | ajv.errorsText | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:31 | ajv.errorsText | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:31 | ajv.errorsText | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:31 | ajv.errorsText | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:31 | ajv.errorsText | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | ajv.errorsText() | receiverName | res |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | exceptional return of ajv.errorsText() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | exceptional return of ajv.errorsText() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | exceptional return of ajv.errorsText() | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | exceptional return of ajv.errorsText() | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:18:11:33 | exceptional return of ajv.errorsText() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:11:22:11:31 | errorsText | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:11:22:11:31 | errorsText | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:11:22:11:31 | errorsText | enclosingFunctionBody | req res ajv validate pollData req body res send ajv errorsText |
| autogenerated/Xss/ExceptionXss/ajv.js:11:22:11:31 | errorsText | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:11:22:11:31 | errorsText | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:9 | joi | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:9 | joi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:9 | joi | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi = require("joi") | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi = require("joi") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:7:15:26 | joi = require("joi") | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:19 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:19 | require | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | exceptional return of require("joi") | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | exceptional return of require("joi") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | exceptional return of require("joi") | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | require("joi") | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | require("joi") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:13:15:26 | require("joi") | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | calleeImports |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:15:21:15:25 | "joi" | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:16:15 | joiSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:16:15 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:16:15 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:16:15 | joiSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSche ...  'age') | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSche ...  'age') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSche ...  'age') | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:7:19:22 | joiSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:21 | joi | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:21 | joi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:21 | joi | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:28 | joi.object | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:28 | joi.object | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:28 | joi.object | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | exceptional return of joi.object() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | exceptional return of joi.object() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | exceptional return of joi.object() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | joi.object() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | joi.object() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:30 | joi.object() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:35 | joi.object().keys | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:35 | joi.object().keys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:16:35 | joi.object().keys | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | exceptional return of joi.obj ... ed()\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | exceptional return of joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | exceptional return of joi.obj ... ed()\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | joi.obj ... ed()\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | joi.obj ... ed()\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:2 | joi.obj ... ed()\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:7 | joi.obj ... }).with | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:7 | joi.obj ... }).with | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:7 | joi.obj ... }).with | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | exceptional return of joi.obj ...  'age') | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | exceptional return of joi.obj ...  'age') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | exceptional return of joi.obj ...  'age') | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | joi.obj ...  'age') | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | joi.obj ...  'age') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:19:19:22 | joi.obj ...  'age') | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:23:16:28 | object | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:23:16:28 | object | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:23:16:28 | object | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:32:16:35 | keys | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:32:16:35 | keys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:32:16:35 | keys | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | CalleeFlexibleAccessPath | joi.object().keys |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | calleeImports | joi |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:16:37:19:1 | {\\n    n ... red()\\n} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:8 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:8 | name | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:8 | name | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:5:17:33 | name: j ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:13 | joi | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:13 | joi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:13 | joi | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:20 | joi.string | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:20 | joi.string | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:20 | joi.string | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | exceptional return of joi.string() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | exceptional return of joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | exceptional return of joi.string() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | joi.string() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | joi.string() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:22 | joi.string() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:31 | joi.str ... equired | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:31 | joi.str ... equired | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:31 | joi.str ... equired | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | exceptional return of joi.str ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | exceptional return of joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | exceptional return of joi.str ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | CalleeFlexibleAccessPath | joi.object().keys |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | InputAccessPathFromCallee | 0.name |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | assignedToPropName | name |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | calleeImports | joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:11:17:33 | joi.str ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:15:17:20 | string | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:15:17:20 | string | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:15:17:20 | string | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:17:24:17:31 | required | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:24:17:31 | required | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:17:24:17:31 | required | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:7 | age | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:7 | age | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:7 | age | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:5:18:32 | age: jo ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:12 | joi | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:12 | joi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:12 | joi | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:19 | joi.number | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:19 | joi.number | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:19 | joi.number | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | exceptional return of joi.number() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | exceptional return of joi.number() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | exceptional return of joi.number() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | joi.number() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | joi.number() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:21 | joi.number() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:30 | joi.num ... equired | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:30 | joi.num ... equired | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:30 | joi.num ... equired | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | exceptional return of joi.num ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | exceptional return of joi.num ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | exceptional return of joi.num ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | CalleeFlexibleAccessPath | joi.object().keys |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | InputAccessPathFromCallee | 0.age |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | assignedToPropName | age |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | calleeImports | joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:10:18:32 | joi.num ... uired() | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:14:18:19 | number | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:14:18:19 | number | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:14:18:19 | number | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:18:23:18:30 | required | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:23:18:30 | required | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:18:23:18:30 | required | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:19:4:19:7 | with | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:4:19:7 | with | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:4:19:7 | with | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | CalleeFlexibleAccessPath | joi.object().keys().with |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | calleeImports | joi |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:9:19:14 | 'name' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | CalleeFlexibleAccessPath | joi.object().keys().with |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | calleeImports | joi |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:19:17:19:21 | 'age' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:3 | app | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:21:8 | app.post | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | app.pos ...    }\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | app.pos ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | app.pos ...    }\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | exceptional return of app.pos ...    }\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | exceptional return of app.pos ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:1:26:2 | exceptional return of app.pos ...    }\\n}) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:5:21:8 | post | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:5:21:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:5:21:8 | post | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:10:21:20 | '/votedata' | receiverName | app |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:21:22 | joiSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:21:22 | joiSchema | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:21:22 | joiSchema | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:21:22 | joiSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:21:22 | joiSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | 'arguments' object of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | (req, r ...     }\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | exceptional return of anonymous function | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | exceptional return of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | return of anonymous function | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:23:26:1 | return of anonymous function | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:24:21:26 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:21:29:21:31 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:13 | val | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:13 | val | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:13 | val | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:13 | val | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:13 | val | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val = j ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val = j ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val = j ... q.body) | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val = j ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:11:22:44 | val = j ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:25 | joiSchema | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:25 | joiSchema | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:25 | joiSchema | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:25 | joiSchema | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:25 | joiSchema | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:34 | joiSchema.validate | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:34 | joiSchema.validate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:34 | joiSchema.validate | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:34 | joiSchema.validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:34 | joiSchema.validate | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | exceptional return of joiSche ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | exceptional return of joiSche ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | exceptional return of joiSche ... q.body) | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | exceptional return of joiSche ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | exceptional return of joiSche ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | joiSche ... q.body) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | joiSche ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | joiSche ... q.body) | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | joiSche ... q.body) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:17:22:44 | joiSche ... q.body) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:27:22:34 | validate | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:27:22:34 | validate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:27:22:34 | validate | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:27:22:34 | validate | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:27:22:34 | validate | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:36:22:38 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:36:22:38 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:36:22:38 | req | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:36:22:38 | req | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:36:22:38 | req | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:22:40:22:43 | body | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:22:40:22:43 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:22:40:22:43 | body | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:22:40:22:43 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:22:40:22:43 | body | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:11 | val | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:11 | val | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:11 | val | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:11 | val | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:11 | val | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:17 | val.error | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:17 | val.error | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:17 | val.error | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:17 | val.error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:23:9:23:17 | val.error | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:23:13:23:17 | error | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:23:13:23:17 | error | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:23:13:23:17 | error | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:23:13:23:17 | error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:23:13:23:17 | error | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:11 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:11 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:11 | res | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:11 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:11 | res | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:16 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:16 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:16 | res.send | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:16 | res.send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:16 | res.send | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | exceptional return of res.send(val.error) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | exceptional return of res.send(val.error) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | exceptional return of res.send(val.error) | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | exceptional return of res.send(val.error) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | exceptional return of res.send(val.error) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | res.send(val.error) | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | res.send(val.error) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | res.send(val.error) | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | res.send(val.error) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:9:24:27 | res.send(val.error) | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:13:24:16 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:13:24:16 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:13:24:16 | send | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:13:24:16 | send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:13:24:16 | send | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:20 | val | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:20 | val | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:20 | val | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:20 | val | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:20 | val | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/ajv.js:24:18:24:26 | val.error | receiverName | res |
| autogenerated/Xss/ExceptionXss/ajv.js:24:22:24:26 | error | contextFunctionInterfaces |  |
| autogenerated/Xss/ExceptionXss/ajv.js:24:22:24:26 | error | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/ajv.js:24:22:24:26 | error | enclosingFunctionBody | req res val joiSchema validate req body val error res send val error |
| autogenerated/Xss/ExceptionXss/ajv.js:24:22:24:26 | error | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ExceptionXss/ajv.js:24:22:24:26 | error | fileImports | ajv express joi |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:0 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:0 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:1 | require | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:1:1 | require | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:109:2 | (functi ...  \\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:109:2 | (functi ...  \\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:1:109:2 | (functi ...  \\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:1 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:1:2 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | exceptional return of anonymous function | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | functio ... ! \\n\\t}\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | functio ... ! \\n\\t}\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | functio ... ! \\n\\t}\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | return of anonymous function | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:1:2:109:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:8 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:8 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:8 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:8 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:8 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo = d ... ocation | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo = d ... ocation | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo = d ... ocation | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo = d ... ocation | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:6:2:28 | foo = d ... ocation | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:19 | document | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:19 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:19 | document | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:19 | document | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:19 | document | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:28 | document.location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:28 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:28 | document.location | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:28 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:12:2:28 | document.location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:21:2:28 | location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:21:2:28 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:21:2:28 | location | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:21:2:28 | location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:2:21:2:28 | location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:4:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:4:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:4:1 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:4:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:4:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | 'arguments' object of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | 'arguments' object of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | 'arguments' object of function inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | 'arguments' object of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | 'arguments' object of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | exceptional return of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | exceptional return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | exceptional return of function inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | exceptional return of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | exceptional return of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | functio ... (x);\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | functio ... (x);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | functio ... (x);\\n\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | functio ... (x);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | functio ... (x);\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | return of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | return of function inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | return of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:2:6:2 | return of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:11:4:15 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:4:17:4:17 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:9 | unknown | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | exceptional return of unknown(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | exceptional return of unknown(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | exceptional return of unknown(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | exceptional return of unknown(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | exceptional return of unknown(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | unknown(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | unknown(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | unknown(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | unknown(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:3:5:12 | unknown(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:5:11:5:11 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | exceptional return of unknown(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | exceptional return of unknown(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | exceptional return of unknown(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | exceptional return of unknown(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | exceptional return of unknown(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | unknown(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | unknown(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | unknown(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | unknown(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:3:9:14 | unknown(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:9:11:9:13 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:10:11:10:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:3:11:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:5:11:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:13:11:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:13:11:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:13:11:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:13:11:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:13:11:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:11:18:11:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:7 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:7 | inner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:7 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:7 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:7 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | inner(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | inner(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | inner(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | inner(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:3:15:12 | inner(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:15:9:15:11 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:16:11:16:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:3:17:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:5:17:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:13:17:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:13:17:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:13:17:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:13:17:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:13:17:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:17:18:17:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | exceptional return of unknown(foo + "bar") | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | exceptional return of unknown(foo + "bar") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | exceptional return of unknown(foo + "bar") | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | exceptional return of unknown(foo + "bar") | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | exceptional return of unknown(foo + "bar") | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | unknown(foo + "bar") | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | unknown(foo + "bar") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | unknown(foo + "bar") | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | unknown(foo + "bar") | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:3:21:22 | unknown(foo + "bar") | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:13 | foo | stringConcatenatedWith |  -endpoint- 'bar' |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:11:21:21 | foo + "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:21:17:21:21 | "bar" | stringConcatenatedWith | foo -endpoint-  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:22:11:22:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:3:23:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:5:23:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:13:23:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:13:23:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:13:23:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:13:23:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:13:23:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:23:18:23:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | exceptional return of unknown ...  foo }) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | exceptional return of unknown ...  foo }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | exceptional return of unknown ...  foo }) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | exceptional return of unknown ...  foo }) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | exceptional return of unknown ...  foo }) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | unknown ...  foo }) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | unknown ...  foo }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | unknown ...  foo }) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | unknown ...  foo }) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:3:27:24 | unknown ...  foo }) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:11:27:23 | { prop: foo } | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:16 | prop | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:16 | prop | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:16 | prop | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:16 | prop | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:16 | prop | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:13:27:21 | prop: foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | InputAccessPathFromCallee | 0.prop |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | assignedToPropName | prop |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:27:19:27:21 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:28:11:28:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:3:29:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:5:29:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:13:29:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:13:29:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:13:29:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:13:29:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:13:29:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:29:18:29:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | exceptional return of unknown ... , foo]) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | exceptional return of unknown ... , foo]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | exceptional return of unknown ... , foo]) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | exceptional return of unknown ... , foo]) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | exceptional return of unknown ... , foo]) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | unknown ... , foo]) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | unknown ... , foo]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | unknown ... , foo]) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | unknown ... , foo]) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:3:33:23 | unknown ... , foo]) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:11:33:22 | ["bar", foo] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:12:33:16 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:33:19:33:21 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:34:11:34:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:3:35:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:5:35:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:13:35:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:13:35:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:13:35:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:13:35:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:13:35:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:35:18:35:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:38:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | 'arguments' object of function deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | 'arguments' object of function deep | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | 'arguments' object of function deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | 'arguments' object of function deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | 'arguments' object of function deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | exceptional return of function deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | exceptional return of function deep | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | exceptional return of function deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | exceptional return of function deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | exceptional return of function deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | functio ... (x);\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | functio ... (x);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | functio ... (x);\\n\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | functio ... (x);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | functio ... (x);\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | return of function deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | return of function deep | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | return of function deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | return of function deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:2:40:2 | return of function deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:11:38:14 | deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:38:16:38:16 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:7 | deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:7 | deep2 | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:7 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:7 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:7 | deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | deep2(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | deep2(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | deep2(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | deep2(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | deep2(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | CalleeFlexibleAccessPath | deep2 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:39:9:39:9 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:41:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | 'arguments' object of function deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | 'arguments' object of function deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | 'arguments' object of function deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | 'arguments' object of function deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | 'arguments' object of function deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | exceptional return of function deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | exceptional return of function deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | exceptional return of function deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | exceptional return of function deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | exceptional return of function deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | functio ... (x);\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | functio ... (x);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | functio ... (x);\\n\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | functio ... (x);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | functio ... (x);\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | return of function deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | return of function deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | return of function deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | return of function deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:2:43:2 | return of function deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:11:41:15 | deep2 | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:41:17:41:17 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:7 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:7 | inner | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:7 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:7 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:7 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | exceptional return of inner(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | exceptional return of inner(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | exceptional return of inner(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | exceptional return of inner(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | exceptional return of inner(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | inner(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | inner(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | inner(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | inner(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:3:42:10 | inner(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:42:9:42:9 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:6 | deep | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:6 | deep | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:6 | deep | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:6 | deep | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:6 | deep | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | deep("bar" + foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | deep("bar" + foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | deep("bar" + foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | deep("bar" + foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | deep("bar" + foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:12 | "bar" | stringConcatenatedWith |  -endpoint- foo |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | CalleeFlexibleAccessPath | deep |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:8:46:18 | "bar" + foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:46:16:46:18 | foo | stringConcatenatedWith | 'bar' -endpoint-  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:47:11:47:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:3:48:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:5:48:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:13:48:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:13:48:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:13:48:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:13:48:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:13:48:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:48:18:48:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:9 | tmp | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:9 | tmp | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:9 | tmp | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:9 | tmp | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:9 | tmp | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:23 | tmp = "bar" + foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:23 | tmp = "bar" + foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:23 | tmp = "bar" + foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:23 | tmp = "bar" + foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:7:52:23 | tmp = "bar" + foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:17 | "bar" | stringConcatenatedWith |  -endpoint- foo |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:23 | "bar" + foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:23 | "bar" + foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:23 | "bar" + foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:23 | "bar" + foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:13:52:23 | "bar" + foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:52:21:52:23 | foo | stringConcatenatedWith | 'bar' -endpoint-  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:53:11:53:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:53:11:53:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:53:11:53:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:53:11:53:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:53:11:53:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:3:54:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:5:54:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:13:54:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:13:54:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:13:54:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:13:54:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:13:54:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:54:18:54:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:57:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:57:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:57:1 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:57:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:57:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | 'arguments' object of function safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | 'arguments' object of function safe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | 'arguments' object of function safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | 'arguments' object of function safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | 'arguments' object of function safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | exceptional return of function safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | exceptional return of function safe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | exceptional return of function safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | exceptional return of function safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | exceptional return of function safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | functio ... ar";\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | functio ... ar";\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | functio ... ar";\\n\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | functio ... ar";\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | functio ... ar";\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | return of function safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | return of function safe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | return of function safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | return of function safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:2:59:2 | return of function safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:11:57:14 | safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:57:16:57:16 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:9 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:9 | foo | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:9 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:9 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:9 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:21 | foo = x + "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:21 | foo = x + "bar" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:21 | foo = x + "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:21 | foo = x + "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:7:58:21 | foo = x + "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:13 | x | stringConcatenatedWith |  -endpoint- 'bar' |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:21 | x + "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:21 | x + "bar" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:21 | x + "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:21 | x + "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:13:58:21 | x + "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:58:17:58:21 | "bar" | stringConcatenatedWith | x -endpoint-  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:6 | safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:6 | safe | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:6 | safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:6 | safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:6 | safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | exceptional return of safe(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | exceptional return of safe(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | exceptional return of safe(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | exceptional return of safe(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | exceptional return of safe(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | safe(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | safe(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | safe(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | safe(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:3:62:11 | safe(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | CalleeFlexibleAccessPath | safe |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:62:8:62:10 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:63:11:63:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:3:64:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:5:64:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:13:64:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:13:64:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:13:64:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:13:64:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:13:64:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:64:18:64:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:6 | safe | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:6 | safe | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:6 | safe | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:6 | safe | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:6 | safe | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:11 | safe.call | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:11 | safe.call | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:11 | safe.call | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:11 | safe.call | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:11 | safe.call | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | exceptional return of safe.call(null, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | exceptional return of safe.call(null, foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | exceptional return of safe.call(null, foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | exceptional return of safe.call(null, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | exceptional return of safe.call(null, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | reflective call | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | reflective call | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | reflective call | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | reflective call | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | reflective call | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | safe.call(null, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | safe.call(null, foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | safe.call(null, foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | safe.call(null, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:3:68:22 | safe.call(null, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:8:68:11 | call | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:8:68:11 | call | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:8:68:11 | call | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:8:68:11 | call | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:8:68:11 | call | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | CalleeFlexibleAccessPath | safe.call |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:13:68:16 | null | receiverName | safe |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | CalleeFlexibleAccessPath | safe |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | CalleeFlexibleAccessPath | safe.call |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | receiverName | safe |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:69:11:69:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:3:70:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:5:70:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:13:70:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:13:70:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:13:70:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:13:70:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:13:70:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:70:18:70:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:72:6:72:17 | myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:74:14 | myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:74:14 | myWeirdInner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:74:14 | myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:74:14 | myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:74:14 | myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeird ... x);\\n\\t\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeird ... x);\\n\\t\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeird ... x);\\n\\t\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeird ... x);\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeird ... x);\\n\\t\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeirdInner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:3:76:3 | myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | this | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:74:17 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | 'arguments' object of function myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | 'arguments' object of function myWeirdInner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | 'arguments' object of function myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | 'arguments' object of function myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | 'arguments' object of function myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | exceptional return of function myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | exceptional return of function myWeirdInner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | exceptional return of function myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | exceptional return of function myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | exceptional return of function myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | functio ... x);\\n\\t\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | functio ... x);\\n\\t\\t} | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | functio ... x);\\n\\t\\t} | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | functio ... x);\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | functio ... x);\\n\\t\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | return of function myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | return of function myWeirdInner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | return of function myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | return of function myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:18:76:3 | return of function myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:74:28:74:28 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:8 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:8 | inner | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:8 | inner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:8 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:8 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | exceptional return of inner(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | exceptional return of inner(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | exceptional return of inner(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | exceptional return of inner(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | exceptional return of inner(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | inner(x) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | inner(x) | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | inner(x) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | inner(x) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:4:75:11 | inner(x) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | contextSurroundingFunctionParameters | ()\n(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:75:10:75:10 | x | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:77:11:77:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:77:11:77:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:77:11:77:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:77:11:77:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:77:11:77:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:3:78:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:5:78:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:13:78:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:13:78:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:13:78:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:13:78:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:13:78:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:78:18:78:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:14 | myWeirdInner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:14 | myWeirdInner | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:14 | myWeirdInner | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:14 | myWeirdInner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:14 | myWeirdInner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | myWeirdInner(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | myWeirdInner(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | myWeirdInner(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | myWeirdInner(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:3:81:19 | myWeirdInner(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | CalleeFlexibleAccessPath | myWeirdInner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:81:16:81:18 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:82:11:82:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:3:83:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:5:83:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:13:83:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:13:83:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:13:83:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:13:83:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:13:83:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:83:18:83:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:2 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:2 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:2 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:10 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:15 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:15 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:15 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:15 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:15 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | $('myId').html(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | $('myId').html(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | $('myId').html(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | $('myId').html(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | $('myId').html(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | exceptional return of $('myId').html(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | exceptional return of $('myId').html(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | exceptional return of $('myId').html(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | exceptional return of $('myId').html(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:2:86:20 | exceptional return of $('myId').html(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:4:86:9 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:12:86:15 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:12:86:15 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:12:86:15 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:12:86:15 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:12:86:15 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:86:17:86:19 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | exceptional return of unknown ... /foo/)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | exceptional return of unknown ... /foo/)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | exceptional return of unknown ... /foo/)) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | exceptional return of unknown ... /foo/)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | exceptional return of unknown ... /foo/)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | unknown ... /foo/)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | unknown ... /foo/)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | unknown ... /foo/)) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | unknown ... /foo/)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:3:89:27 | unknown ... /foo/)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:13 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:13 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:13 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:13 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:13 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:19 | foo.match | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:19 | foo.match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:19 | foo.match | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:19 | foo.match | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:19 | foo.match | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | exceptional return of foo.match(/foo/) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | exceptional return of foo.match(/foo/) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | exceptional return of foo.match(/foo/) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | exceptional return of foo.match(/foo/) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | exceptional return of foo.match(/foo/) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:11:89:26 | foo.match(/foo/) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:15:89:19 | match | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:15:89:19 | match | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:15:89:19 | match | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:15:89:19 | match | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:15:89:19 | match | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | CalleeFlexibleAccessPath | foo.match |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:89:21:89:25 | /foo/ | receiverName | foo |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:90:11:90:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:3:91:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:5:91:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:13:91:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:13:91:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:13:91:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:13:91:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:13:91:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:91:18:91:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:9 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | exceptional return of unknown ... "bar"]) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | exceptional return of unknown ... "bar"]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | exceptional return of unknown ... "bar"]) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | exceptional return of unknown ... "bar"]) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | exceptional return of unknown ... "bar"]) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | unknown ... "bar"]) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | unknown ... "bar"]) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | unknown ... "bar"]) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | unknown ... "bar"]) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:3:95:23 | unknown ... "bar"]) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:11:95:22 | [foo, "bar"] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:12:95:14 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:95:17:95:21 | "bar" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:96:11:96:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:3:97:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:5:97:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:13:97:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:13:97:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:13:97:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:13:97:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:13:97:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:97:18:97:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:10 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:10 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:10 | unknown | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:10 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:10 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | exceptional return of unknown(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | exceptional return of unknown(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | exceptional return of unknown(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | exceptional return of unknown(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | exceptional return of unknown(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | unknown(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | unknown(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | unknown(foo) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | unknown(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:4:102:15 | unknown(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:102:12:102:14 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:106:11:106:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:3 | $ | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:16 | $('myId').html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:3:107:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:5:107:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:13:107:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:13:107:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:13:107:16 | html | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:13:107:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:13:107:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | enclosingFunctionBody | foo document location inner x unknown x unknown foo e $ myId html e inner foo e $ myId html e unknown foo bar e $ myId html e unknown prop foo e $ myId html e unknown bar foo e $ myId html e deep x deep2 x deep2 x inner x deep bar foo e $ myId html e tmp bar foo e $ myId html e safe x foo x bar safe foo e $ myId html e safe call null foo e $ myId html e myWeirdInner myWeirdInner x inner x e $ myId html e myWeirdInner foo e $ myId html e $ myId html foo unknown foo match /foo/ e $ myId html e unknown foo bar e $ myId html e unknown foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:107:18:107:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:11 | express | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:11 | express | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express ... press') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:5:111:32 | express ... press') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:21 | require | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:21 | require | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | exceptional return of require('express') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | exceptional return of require('express') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | require('express') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:15:111:32 | require('express') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:111:23:111:31 | 'express' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:7 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:7 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app = express() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:5:113:19 | app = express() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:17 | express | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:17 | express | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | exceptional return of express() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | exceptional return of express() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | express() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:113:11:113:19 | express() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:3 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:3 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:7 | app.get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:115:7 | app.get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | app.get ... !\\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | app.get ... !\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | app.get ... !\\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | exceptional return of app.get ... !\\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | exceptional return of app.get ... !\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:1:121:2 | exceptional return of app.get ... !\\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:5:115:7 | get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:5:115:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:5:115:7 | get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:9:115:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:115:21 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:115:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:115:21 | this | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:115:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:115:21 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | exceptional return of anonymous function | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | functio ... K!\\n\\t}\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | return of anonymous function | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:22:121:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:32:115:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:115:37:115:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:9 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:9 | unknown | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:9 | unknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | exceptional return of unknown ... ams.id) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | exceptional return of unknown ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | exceptional return of unknown ... ams.id) | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | exceptional return of unknown ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | exceptional return of unknown ... ams.id) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | unknown ... ams.id) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | unknown ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | unknown ... ams.id) | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | unknown ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:3:117:24 | unknown ... ams.id) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:13 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:13 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:13 | req | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:13 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:13 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:20 | req.params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:20 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:20 | req.params | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:20 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:20 | req.params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:11:117:23 | req.params.id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:15:117:20 | params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:15:117:20 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:15:117:20 | params | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:15:117:20 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:15:117:20 | params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:22:117:23 | id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:22:117:23 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:22:117:23 | id | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:22:117:23 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:117:22:117:23 | id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:118:11:118:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:5 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:5 | res | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:5 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:10 | res.send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:10 | res.send | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:10 | res.send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | exceptional return of res.sen ...  " + e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | exceptional return of res.sen ...  " + e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | exceptional return of res.sen ...  " + e) | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | exceptional return of res.sen ...  " + e) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | exceptional return of res.sen ...  " + e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | res.sen ...  " + e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | res.sen ...  " + e) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | res.sen ...  " + e) | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | res.sen ...  " + e) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:3:119:29 | res.sen ...  " + e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:7:119:10 | send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:7:119:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:7:119:10 | send | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:7:119:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:7:119:10 | send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:24 | "Exception: " | stringConcatenatedWith |  -endpoint- e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:12:119:28 | "Exception: " + e | receiverName | res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | enclosingFunctionBody | req res unknown req params id e res send Exception:  e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:119:28:119:28 | e | stringConcatenatedWith | 'Exception: ' -endpoint-  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:2 | (functi ... K\\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:2 | (functi ... K\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:2 | (functi ... K\\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | (functi ... \\t}\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | (functi ... \\t}\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | (functi ... \\t}\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | exceptional return of (functi ... \\t}\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | exceptional return of (functi ... \\t}\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:1:132:4 | exceptional return of (functi ... \\t}\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:124:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:124:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:124:1 | this | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:124:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:124:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | 'arguments' object of anonymous function | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | exceptional return of anonymous function | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | functio ... OK\\n\\t}\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | functio ... OK\\n\\t}\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | functio ... OK\\n\\t}\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | return of anonymous function | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:124:2:132:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:15 | sessionStorage | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:15 | sessionStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:15 | sessionStorage | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:15 | sessionStorage | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:15 | sessionStorage | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:23 | session ... setItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:23 | session ... setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:23 | session ... setItem | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:23 | session ... setItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:23 | session ... setItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | exceptional return of session ... search) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | exceptional return of session ... search) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | exceptional return of session ... search) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | exceptional return of session ... search) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | exceptional return of session ... search) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | session ... search) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | session ... search) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | session ... search) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | session ... search) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:2:125:69 | session ... search) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:17:125:23 | setItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:17:125:23 | setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:17:125:23 | setItem | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:17:125:23 | setItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:17:125:23 | setItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | CalleeFlexibleAccessPath | sessionStorage.setItem |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:25:125:42 | 'exceptionSession' | receiverName | sessionStorage |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:52 | document | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:52 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:52 | document | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:52 | document | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:52 | document | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:61 | document.location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:61 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:61 | document.location | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:61 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:61 | document.location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | CalleeFlexibleAccessPath | sessionStorage.setItem |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:45:125:68 | documen ... .search | receiverName | sessionStorage |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:54:125:61 | location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:54:125:61 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:54:125:61 | location | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:54:125:61 | location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:54:125:61 | location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:63:125:68 | search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:63:125:68 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:63:125:68 | search | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:63:125:68 | search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:125:63:125:68 | search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:9 | unknown | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | exceptional return of unknown ... sion')) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | exceptional return of unknown ... sion')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | exceptional return of unknown ... sion')) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | exceptional return of unknown ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | exceptional return of unknown ... sion')) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | unknown ... sion')) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | unknown ... sion')) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | unknown ... sion')) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | unknown ... sion')) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:3:128:53 | unknown ... sion')) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:24 | sessionStorage | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:24 | sessionStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:24 | sessionStorage | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:24 | sessionStorage | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:24 | sessionStorage | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:32 | session ... getItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:32 | session ... getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:32 | session ... getItem | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:32 | session ... getItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:32 | session ... getItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | exceptional return of session ... ssion') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | exceptional return of session ... ssion') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | exceptional return of session ... ssion') | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | exceptional return of session ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | exceptional return of session ... ssion') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:11:128:52 | session ... ssion') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:26:128:32 | getItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:26:128:32 | getItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:26:128:32 | getItem | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:26:128:32 | getItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:26:128:32 | getItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | CalleeFlexibleAccessPath | sessionStorage.getItem |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:128:34:128:51 | 'exceptionSession' | receiverName | sessionStorage |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:129:11:129:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:3 | $ | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | $('myId') | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | exceptional return of $('myId') | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:16 | $('myId').html | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | $('myId').html(e) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:3:130:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:5:130:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:13:130:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:13:130:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:13:130:16 | html | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:13:130:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:13:130:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | enclosingFunctionBody | sessionStorage setItem exceptionSession document location search unknown sessionStorage getItem exceptionSession e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:130:18:130:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:3 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:3 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:7 | app.get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:135:7 | app.get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | app.get ... \\t});\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | app.get ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | app.get ... \\t});\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | exceptional return of app.get ... \\t});\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | exceptional return of app.get ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:1:143:2 | exceptional return of app.get ... \\t});\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:5:135:7 | get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:5:135:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:5:135:7 | get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:9:135:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:135:21 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:135:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:135:21 | this | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:135:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:135:21 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | exceptional return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | functio ... \\n\\t});\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:22:143:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:32:135:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:37:135:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:37:135:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:37:135:39 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:37:135:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:135:37:135:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:136:8 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:136:8 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:136:8 | unknown | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:136:8 | unknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:136:8 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | exceptional return of unknown ... w?)\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | exceptional return of unknown ... w?)\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | exceptional return of unknown ... w?)\\n\\t}) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | exceptional return of unknown ... w?)\\n\\t}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | exceptional return of unknown ... w?)\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | unknown ... w?)\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | unknown ... w?)\\n\\t}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | unknown ... w?)\\n\\t}) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | unknown ... w?)\\n\\t}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:2:142:3 | unknown ... w?)\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:12 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:12 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:12 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:12 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:12 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:19 | req.params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:19 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:19 | req.params | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:19 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:19 | req.params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:10:136:22 | req.params.id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:14:136:19 | params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:14:136:19 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:14:136:19 | params | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:14:136:19 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:14:136:19 | params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:21:136:22 | id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:21:136:22 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:21:136:22 | id | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:21:136:22 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:21:136:22 | id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | 'arguments' object of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | (error, ... ow?)\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | exceptional return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:25:142:2 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:26:136:30 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:136:33:136:35 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:137:7:137:11 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:4 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:4 | $ | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:4 | $ | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:4 | $ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:4 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | $('myId') | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | exceptional return of $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | exceptional return of $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:12 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:17 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:17 | $('myId').html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:17 | $('myId').html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:17 | $('myId').html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:17 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | $('myId ... (error) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | $('myId ... (error) | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | $('myId ... (error) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | $('myId ... (error) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | $('myId ... (error) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | exceptional return of $('myId ... (error) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | exceptional return of $('myId ... (error) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | exceptional return of $('myId ... (error) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | exceptional return of $('myId ... (error) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:4:138:24 | exceptional return of $('myId ... (error) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:6:138:11 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:14:138:17 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:14:138:17 | html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:14:138:17 | html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:14:138:17 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:14:138:17 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:138:19:138:23 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:3 | $ | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:3 | $ | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:3 | $ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | $('myId') | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | exceptional return of $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | exceptional return of $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:16 | $('myId').html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:16 | $('myId').html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:16 | $('myId').html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | $('myId').html(res) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | $('myId').html(res) | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | $('myId').html(res) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | $('myId').html(res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | $('myId').html(res) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | exceptional return of $('myId').html(res) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | exceptional return of $('myId').html(res) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | exceptional return of $('myId').html(res) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | exceptional return of $('myId').html(res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:3:141:21 | exceptional return of $('myId').html(res) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:5:141:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:13:141:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:13:141:16 | html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:13:141:16 | html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:13:141:16 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:13:141:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:141:18:141:20 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:2 | (functi ... \\t});\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:2 | (functi ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:2 | (functi ... \\t});\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | (functi ... );\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | (functi ... );\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | exceptional return of (functi ... );\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | exceptional return of (functi ... );\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:1:177:4 | exceptional return of (functi ... );\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:1 | this | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:145:2 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | functio ... \\n\\t});\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | functio ... \\n\\t});\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | functio ... \\n\\t});\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:145:2:177:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:8 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo = d ... .search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo = d ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo = d ... .search | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo = d ... .search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:6:146:35 | foo = d ... .search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:19 | document | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:19 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:19 | document | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:19 | document | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:19 | document | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:28 | document.location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:28 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:28 | document.location | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:28 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:28 | document.location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:35 | documen ... .search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:35 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:35 | documen ... .search | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:35 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:12:146:35 | documen ... .search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:21:146:28 | location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:21:146:28 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:21:146:28 | location | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:21:146:28 | location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:21:146:28 | location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:30:146:35 | search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:30:146:35 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:30:146:35 | search | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:30:146:35 | search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:146:30:146:35 | search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | exceptional return of new Pro ... solve)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | exceptional return of new Pro ... solve)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | exceptional return of new Pro ... solve)) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | exceptional return of new Pro ... solve)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | exceptional return of new Pro ... solve)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | new Pro ... solve)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | new Pro ... solve)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | new Pro ... solve)) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | new Pro ... solve)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:46 | new Pro ... solve)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:52 | new Pro ... ).catch | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:52 | new Pro ... ).catch | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:52 | new Pro ... ).catch | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:52 | new Pro ... ).catch | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:148:52 | new Pro ... ).catch | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | exceptional return of new Pro ...  OK\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | exceptional return of new Pro ...  OK\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | exceptional return of new Pro ...  OK\\n\\t}) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | exceptional return of new Pro ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | exceptional return of new Pro ...  OK\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | new Pro ...  OK\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | new Pro ...  OK\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | new Pro ...  OK\\n\\t}) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | new Pro ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:2:150:3 | new Pro ...  OK\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:6:148:12 | Promise | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:6:148:12 | Promise | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:6:148:12 | Promise | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:6:148:12 | Promise | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:6:148:12 | Promise | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:13 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:13 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:13 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:13 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:13 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:20 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | CalleeFlexibleAccessPath | Promise |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | resolve ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:14:148:45 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:31 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:31 | unknown | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:31 | unknown | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:31 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:31 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | exceptional return of unknown ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | exceptional return of unknown ... esolve) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | exceptional return of unknown ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | exceptional return of unknown ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | exceptional return of unknown ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | unknown ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | unknown ... esolve) | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | unknown ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | unknown ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:25:148:45 | unknown ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:33:148:35 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:38:148:44 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:48:148:52 | catch | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:48:148:52 | catch | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:48:148:52 | catch | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:48:148:52 | catch | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:48:148:52 | catch | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | CalleeFlexibleAccessPath | Promise().catch |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | (e) =>  ... T OK\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:54:150:2 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:148:55:148:55 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:3 | $ | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:3 | $ | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | $('myId') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:16 | $('myId').html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:16 | $('myId').html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | $('myId').html(e) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:3:149:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:5:149:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:13:149:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:13:149:16 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:13:149:16 | html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:13:149:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:13:149:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:149:18:149:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:6 | null | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:6 | null | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:6 | null | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:6 | null | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:6 | null | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:11 | null[foo] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:11 | null[foo] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:11 | null[foo] | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:11 | null[foo] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:3:153:11 | null[foo] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:8:153:10 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:8:153:10 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:8:153:10 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:8:153:10 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:153:8:153:10 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:154:11:154:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:3 | $ | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:16 | $('myId').html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:3:155:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:5:155:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:13:155:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:13:155:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:13:155:16 | html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:13:155:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:13:155:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:155:18:155:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:9 | unknown | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:9 | unknown | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | exceptional return of unknown() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | exceptional return of unknown() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | exceptional return of unknown() | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | exceptional return of unknown() | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | exceptional return of unknown() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | unknown() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | unknown() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | unknown() | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | unknown() | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:11 | unknown() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:16 | unknown()[foo] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:16 | unknown()[foo] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:16 | unknown()[foo] | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:16 | unknown()[foo] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:3:159:16 | unknown()[foo] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:13:159:15 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:13:159:15 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:13:159:15 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:13:159:15 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:159:13:159:15 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:160:11:160:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:3 | $ | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:16 | $('myId').html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:3:161:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:5:161:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:13:161:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:13:161:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:13:161:16 | html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:13:161:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:13:161:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:161:18:161:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:7 | "foo" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:7 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:7 | "foo" | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:7 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:7 | "foo" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:12 | "foo"[foo] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:12 | "foo"[foo] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:12 | "foo"[foo] | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:12 | "foo"[foo] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:3:165:12 | "foo"[foo] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:9:165:11 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:9:165:11 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:9:165:11 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:9:165:11 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:165:9:165:11 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:166:11:166:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:3 | $ | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:16 | $('myId').html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:3:167:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:5:167:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:13:167:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:13:167:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:13:167:16 | html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:13:167:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:13:167:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:167:18:167:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:170:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:170:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:170:1 | this | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:170:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:170:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | 'arguments' object of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | 'arguments' object of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | 'arguments' object of function inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | 'arguments' object of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | 'arguments' object of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | exceptional return of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | exceptional return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | exceptional return of function inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | exceptional return of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | exceptional return of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | functio ... ve);\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | functio ... ve);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | functio ... ve);\\n\\t} | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | functio ... ve);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | functio ... ve);\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | return of function inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | return of function inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | return of function inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | return of function inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:2:172:2 | return of function inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:11:170:15 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:17:170:23 | tainted | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:170:26:170:32 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:9 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:9 | unknown | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:9 | unknown | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:9 | unknown | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:9 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | exceptional return of unknown ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | exceptional return of unknown ... esolve) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | exceptional return of unknown ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | exceptional return of unknown ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | exceptional return of unknown ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | unknown ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | unknown ... esolve) | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | unknown ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | unknown ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:3:171:27 | unknown ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:11:171:17 | tainted | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | contextSurroundingFunctionParameters | (tainted, resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:171:20:171:26 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | exceptional return of new Pro ... solve)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | exceptional return of new Pro ... solve)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | exceptional return of new Pro ... solve)) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | exceptional return of new Pro ... solve)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | exceptional return of new Pro ... solve)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | new Pro ... solve)) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | new Pro ... solve)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | new Pro ... solve)) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | new Pro ... solve)) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:44 | new Pro ... solve)) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:50 | new Pro ... ).catch | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:50 | new Pro ... ).catch | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:50 | new Pro ... ).catch | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:50 | new Pro ... ).catch | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:174:50 | new Pro ... ).catch | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | exceptional return of new Pro ...  OK\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | exceptional return of new Pro ...  OK\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | exceptional return of new Pro ...  OK\\n\\t}) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | exceptional return of new Pro ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | exceptional return of new Pro ...  OK\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | new Pro ...  OK\\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | new Pro ...  OK\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | new Pro ...  OK\\n\\t}) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | new Pro ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:2:176:3 | new Pro ...  OK\\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:6:174:12 | Promise | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:6:174:12 | Promise | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:6:174:12 | Promise | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:6:174:12 | Promise | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:6:174:12 | Promise | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | inner | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:13 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:20 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | CalleeFlexibleAccessPath | Promise |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | resolve ... esolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:14:174:43 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:29 | inner | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:29 | inner | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:29 | inner | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:29 | inner | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:29 | inner | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | inner(foo, resolve) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | inner(foo, resolve) | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | inner(foo, resolve) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | inner(foo, resolve) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:25:174:43 | inner(foo, resolve) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:31:174:33 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | CalleeFlexibleAccessPath | inner |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | contextSurroundingFunctionParameters | ()\n(resolve) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:36:174:42 | resolve | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:46:174:50 | catch | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:46:174:50 | catch | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:46:174:50 | catch | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:46:174:50 | catch | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:46:174:50 | catch | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | CalleeFlexibleAccessPath | Promise().catch |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | (e) =>  ... T OK\\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | return of anonymous function | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:52:176:2 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:174:53:174:53 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:3 | $ | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:3 | $ | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | $('myId') | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:16 | $('myId').html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:16 | $('myId').html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | $('myId').html(e) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:3:175:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:5:175:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:13:175:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:13:175:16 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:13:175:16 | html | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:13:175:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:13:175:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | enclosingFunctionBody | foo document location search Promise resolve unknown foo resolve catch e $ myId html e null foo e $ myId html e unknown foo e $ myId html e foo foo e $ myId html e inner tainted resolve unknown tainted resolve Promise resolve inner foo resolve catch e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:175:18:175:18 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:3 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:3 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:7 | app.get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:179:7 | app.get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | app.get ... \\t});\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | app.get ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | app.get ... \\t});\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | exceptional return of app.get ... \\t});\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | exceptional return of app.get ... \\t});\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:1:186:2 | exceptional return of app.get ... \\t});\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:5:179:7 | get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:5:179:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:5:179:7 | get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:9:179:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:179:21 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:179:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:179:21 | this | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:179:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:179:21 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | exceptional return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | functio ... \\n\\t});\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:22:186:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:32:179:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:37:179:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:37:179:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:37:179:39 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:37:179:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:179:37:179:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:180:8 | unknown | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:180:8 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:180:8 | unknown | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:180:8 | unknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:180:8 | unknown | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | exceptional return of unknown ... n. \\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | exceptional return of unknown ... n. \\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | exceptional return of unknown ... n. \\n\\t}) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | exceptional return of unknown ... n. \\n\\t}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | exceptional return of unknown ... n. \\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | unknown ... n. \\n\\t}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | unknown ... n. \\n\\t}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | unknown ... n. \\n\\t}) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | unknown ... n. \\n\\t}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:2:185:3 | unknown ... n. \\n\\t}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:12 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:12 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:12 | req | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:12 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:12 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:19 | req.params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:19 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:19 | req.params | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:19 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:19 | req.params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:10:180:22 | req.params.id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:14:180:19 | params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:14:180:19 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:14:180:19 | params | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:14:180:19 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:14:180:19 | params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:21:180:22 | id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:21:180:22 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:21:180:22 | id | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:21:180:22 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:21:180:22 | id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | 'arguments' object of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | CalleeFlexibleAccessPath | unknown |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | (error, ... wn. \\n\\t} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | exceptional return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | return of anonymous function | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:25:185:2 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:26:180:30 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:180:33:180:35 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:181:7:181:11 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:4 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:4 | $ | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:4 | $ | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:4 | $ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:4 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | $('myId') | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | exceptional return of $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | exceptional return of $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:12 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:17 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:17 | $('myId').html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:17 | $('myId').html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:17 | $('myId').html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:17 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | $('myId ... (error) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | $('myId ... (error) | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | $('myId ... (error) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | $('myId ... (error) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | $('myId ... (error) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | exceptional return of $('myId ... (error) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | exceptional return of $('myId ... (error) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | exceptional return of $('myId ... (error) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | exceptional return of $('myId ... (error) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:4:182:24 | exceptional return of $('myId ... (error) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:6:182:11 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:14:182:17 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:14:182:17 | html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:14:182:17 | html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:14:182:17 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:14:182:17 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:182:19:182:23 | error | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:3 | $ | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:3 | $ | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:3 | $ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | $('myId') | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | exceptional return of $('myId') | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | exceptional return of $('myId') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:16 | $('myId').html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:16 | $('myId').html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:16 | $('myId').html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | $('myId').html(res) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | $('myId').html(res) | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | $('myId').html(res) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | $('myId').html(res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | $('myId').html(res) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | exceptional return of $('myId').html(res) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | exceptional return of $('myId').html(res) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | exceptional return of $('myId').html(res) | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | exceptional return of $('myId').html(res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:3:184:21 | exceptional return of $('myId').html(res) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:5:184:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:13:184:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:13:184:16 | html | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:13:184:16 | html | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:13:184:16 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:13:184:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | contextSurroundingFunctionParameters | (req, res)\n(error, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | enclosingFunctionBody | req res unknown req params id error res error $ myId html error $ myId html res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:184:18:184:20 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:3 | app | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:3 | app | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:7 | app.get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:188:7 | app.get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | app.get ... )\\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | app.get ... )\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | app.get ... )\\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | exceptional return of app.get ... )\\n\\t}\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | exceptional return of app.get ... )\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:1:194:2 | exceptional return of app.get ... )\\n\\t}\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:5:188:7 | get | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:5:188:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:5:188:7 | get | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:9:188:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:188:21 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:188:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:188:21 | this | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:188:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:188:21 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | calleeImports | express |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | functio ... s)\\n\\t}\\n} | receiverName | app |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | return of anonymous function | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:22:194:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:32:188:34 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:188:37:188:39 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:5 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:5 | res | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:5 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:10 | res.send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:10 | res.send | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:10 | res.send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | exceptional return of res.sen ... ams.id) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | res.sen ... ams.id) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | res.sen ... ams.id) | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:3:190:25 | res.sen ... ams.id) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:7:190:10 | send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:7:190:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:7:190:10 | send | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:7:190:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:7:190:10 | send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:14 | req | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:14 | req | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:14 | req | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:21 | req.params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:21 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:21 | req.params | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:21 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:21 | req.params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:12:190:24 | req.params.id | receiverName | res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:16:190:21 | params | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:16:190:21 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:16:190:21 | params | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:16:190:21 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:16:190:21 | params | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:23:190:24 | id | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:23:190:24 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:23:190:24 | id | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:23:190:24 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:190:23:190:24 | id | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:191:10:191:12 | err | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:5 | res | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:5 | res | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:5 | res | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:10 | res.send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:10 | res.send | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:10 | res.send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | exceptional return of res.send(err) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | exceptional return of res.send(err) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | exceptional return of res.send(err) | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | exceptional return of res.send(err) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | exceptional return of res.send(err) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | res.send(err) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | res.send(err) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | res.send(err) | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | res.send(err) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:3:192:15 | res.send(err) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:7:192:10 | send | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:7:192:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:7:192:10 | send | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:7:192:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:7:192:10 | send | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | enclosingFunctionBody | req res res send req params id err res send err |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:192:12:192:14 | err | receiverName | res |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:6 | fs | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:6 | fs | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:22 | fs = require("fs") | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:22 | fs = require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:5:196:22 | fs = require("fs") | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:16 | require | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:16 | require | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | exceptional return of require("fs") | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | exceptional return of require("fs") | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | require("fs") | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | require("fs") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:10:196:22 | require("fs") | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | calleeImports |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:196:18:196:21 | "fs" | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:2 | (functi ... \\t}\\n\\t\\n}) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:2 | (functi ... \\t}\\n\\t\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:2 | (functi ... \\t}\\n\\t\\n}) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | (functi ... \\n\\t\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | (functi ... \\n\\t\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | (functi ... \\n\\t\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | exceptional return of (functi ... \\n\\t\\n})() | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | exceptional return of (functi ... \\n\\t\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:1:216:4 | exceptional return of (functi ... \\n\\t\\n})() | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:198:1 | this | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:198:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:198:1 | this | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:198:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:198:1 | this | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | 'arguments' object of anonymous function | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | 'arguments' object of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | exceptional return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | exceptional return of anonymous function | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | exceptional return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | functio ... \\n\\t}\\n\\t\\n} | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | functio ... \\n\\t}\\n\\t\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | functio ... \\n\\t}\\n\\t\\n} | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | return of anonymous function | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | return of anonymous function | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:198:2:216:1 | return of anonymous function | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:8 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:8 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:8 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:8 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:8 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo = d ... .search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo = d ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo = d ... .search | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo = d ... .search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:6:199:35 | foo = d ... .search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:19 | document | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:19 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:19 | document | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:19 | document | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:19 | document | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:28 | document.location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:28 | document.location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:28 | document.location | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:28 | document.location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:28 | document.location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:35 | documen ... .search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:35 | documen ... .search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:35 | documen ... .search | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:35 | documen ... .search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:12:199:35 | documen ... .search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:21:199:28 | location | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:21:199:28 | location | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:21:199:28 | location | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:21:199:28 | location | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:21:199:28 | location | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:30:199:35 | search | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:30:199:35 | search | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:30:199:35 | search | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:30:199:35 | search | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:199:30:199:35 | search | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:8 | Object | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:8 | Object | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:8 | Object | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:8 | Object | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:8 | Object | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:15 | Object.assign | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:15 | Object.assign | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:15 | Object.assign | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:15 | Object.assign | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:15 | Object.assign | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | Object. ... o, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | Object. ... o, foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | Object. ... o, foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | Object. ... o, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | Object. ... o, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | exceptional return of Object. ... o, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | exceptional return of Object. ... o, foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | exceptional return of Object. ... o, foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | exceptional return of Object. ... o, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:3:203:25 | exceptional return of Object. ... o, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:10:203:15 | assign | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:10:203:15 | assign | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:10:203:15 | assign | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:10:203:15 | assign | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:10:203:15 | assign | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:17:203:19 | foo | receiverName | Object |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | CalleeFlexibleAccessPath | Object.assign |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:203:22:203:24 | foo | receiverName | Object |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:3 | _ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:3 | _ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:3 | _ | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:3 | _ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:3 | _ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:8 | _.pick | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:8 | _.pick | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:8 | _.pick | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:8 | _.pick | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:8 | _.pick | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | _.pick(foo, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | _.pick(foo, foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | _.pick(foo, foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | _.pick(foo, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | _.pick(foo, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | exceptional return of _.pick(foo, foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | exceptional return of _.pick(foo, foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | exceptional return of _.pick(foo, foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | exceptional return of _.pick(foo, foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:3:204:18 | exceptional return of _.pick(foo, foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:5:204:8 | pick | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:5:204:8 | pick | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:5:204:8 | pick | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:5:204:8 | pick | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:5:204:8 | pick | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | CalleeFlexibleAccessPath | _.pick |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:10:204:12 | foo | receiverName | _ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | CalleeFlexibleAccessPath | _.pick |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | InputArgumentIndex | 1 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:204:15:204:17 | foo | receiverName | _ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:12 | [foo, foo] | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:12 | [foo, foo] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:12 | [foo, foo] | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:12 | [foo, foo] | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:12 | [foo, foo] | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:17 | [foo, foo].join | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:17 | [foo, foo].join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:17 | [foo, foo].join | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:17 | [foo, foo].join | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:17 | [foo, foo].join | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | [foo, f ... n(join) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | [foo, f ... n(join) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | [foo, f ... n(join) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | [foo, f ... n(join) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | [foo, f ... n(join) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | exceptional return of [foo, f ... n(join) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | exceptional return of [foo, f ... n(join) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | exceptional return of [foo, f ... n(join) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | exceptional return of [foo, f ... n(join) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:3:205:23 | exceptional return of [foo, f ... n(join) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:4:205:6 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:9:205:11 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:14:205:17 | join | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:14:205:17 | join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:14:205:17 | join | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:14:205:17 | join | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:14:205:17 | join | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | CalleeFlexibleAccessPath | ?.join |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:205:19:205:22 | join | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:3 | $ | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:7 | $.val | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:7 | $.val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:7 | $.val | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:7 | $.val | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:7 | $.val | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | $.val(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | $.val(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | $.val(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | $.val(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | $.val(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | exceptional return of $.val(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | exceptional return of $.val(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | exceptional return of $.val(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | exceptional return of $.val(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:3:206:12 | exceptional return of $.val(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:5:206:7 | val | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:5:206:7 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:5:206:7 | val | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:5:206:7 | val | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:5:206:7 | val | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | CalleeFlexibleAccessPath | $.val |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:206:9:206:11 | foo | receiverName | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:6 | JSON | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:6 | JSON | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:6 | JSON | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:6 | JSON | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:6 | JSON | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:12 | JSON.parse | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:12 | JSON.parse | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:12 | JSON.parse | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:12 | JSON.parse | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:12 | JSON.parse | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | JSON.parse(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | JSON.parse(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | JSON.parse(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | JSON.parse(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | JSON.parse(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | exceptional return of JSON.parse(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | exceptional return of JSON.parse(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | exceptional return of JSON.parse(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | exceptional return of JSON.parse(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:3:207:17 | exceptional return of JSON.parse(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:8:207:12 | parse | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:8:207:12 | parse | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:8:207:12 | parse | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:8:207:12 | parse | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:8:207:12 | parse | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | CalleeFlexibleAccessPath | JSON.parse |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:207:14:207:16 | foo | receiverName | JSON |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:7 | /bla/ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:7 | /bla/ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:7 | /bla/ | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:7 | /bla/ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:7 | /bla/ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:12 | /bla/.test | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:12 | /bla/.test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:12 | /bla/.test | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:12 | /bla/.test | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:12 | /bla/.test | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | /bla/.test(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | /bla/.test(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | /bla/.test(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | /bla/.test(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | /bla/.test(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | exceptional return of /bla/.test(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | exceptional return of /bla/.test(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | exceptional return of /bla/.test(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | exceptional return of /bla/.test(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:3:208:17 | exceptional return of /bla/.test(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:9:208:12 | test | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:9:208:12 | test | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:9:208:12 | test | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:9:208:12 | test | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:9:208:12 | test | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | CalleeFlexibleAccessPath | ?.test |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:208:14:208:16 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:9 | console | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:9 | console | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:9 | console | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:9 | console | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:9 | console | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:13 | console.log | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:13 | console.log | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:13 | console.log | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:13 | console.log | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:13 | console.log | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | console.log(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | console.log(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | console.log(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | console.log(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | console.log(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | exceptional return of console.log(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | exceptional return of console.log(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | exceptional return of console.log(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | exceptional return of console.log(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:3:209:18 | exceptional return of console.log(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:11:209:13 | log | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:11:209:13 | log | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:11:209:13 | log | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:11:209:13 | log | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:11:209:13 | log | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:209:15:209:17 | foo | receiverName | console |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:5 | log | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:5 | log | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:5 | log | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:5 | log | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:5 | log | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:10 | log.info | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:10 | log.info | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:10 | log.info | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:10 | log.info | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:10 | log.info | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | exceptional return of log.info(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | exceptional return of log.info(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | exceptional return of log.info(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | exceptional return of log.info(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | exceptional return of log.info(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | log.info(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | log.info(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | log.info(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | log.info(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:3:210:15 | log.info(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:7:210:10 | info | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:7:210:10 | info | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:7:210:10 | info | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:7:210:10 | info | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:7:210:10 | info | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | CalleeFlexibleAccessPath | log.info |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:210:12:210:14 | foo | receiverName | log |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:14 | localStorage | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:14 | localStorage | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:14 | localStorage | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:14 | localStorage | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:14 | localStorage | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:22 | localStorage.setItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:22 | localStorage.setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:22 | localStorage.setItem | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:22 | localStorage.setItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:22 | localStorage.setItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | exceptional return of localSt ... em(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | exceptional return of localSt ... em(foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | exceptional return of localSt ... em(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | exceptional return of localSt ... em(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | exceptional return of localSt ... em(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | localSt ... em(foo) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | localSt ... em(foo) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | localSt ... em(foo) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | localSt ... em(foo) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:3:211:27 | localSt ... em(foo) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:16:211:22 | setItem | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:16:211:22 | setItem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:16:211:22 | setItem | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:16:211:22 | setItem | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:16:211:22 | setItem | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | CalleeFlexibleAccessPath | localStorage.setItem |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:211:24:211:26 | foo | receiverName | localStorage |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:212:11:212:11 | e | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:3 | $ | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:3 | $ | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:3 | $ | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | $('myId') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | $('myId') | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | exceptional return of $('myId') | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | exceptional return of $('myId') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | exceptional return of $('myId') | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | exceptional return of $('myId') | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:11 | exceptional return of $('myId') | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:16 | $('myId').html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:16 | $('myId').html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:16 | $('myId').html | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:16 | $('myId').html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:16 | $('myId').html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | $('myId').html(e) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | $('myId').html(e) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | exceptional return of $('myId').html(e) | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | exceptional return of $('myId').html(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | exceptional return of $('myId').html(e) | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | exceptional return of $('myId').html(e) | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:3:213:19 | exceptional return of $('myId').html(e) | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:5:213:10 | 'myId' | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:13:213:16 | html | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:13:213:16 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:13:213:16 | html | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:13:213:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:13:213:16 | html | fileImports | express fs |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | contextFunctionInterfaces | deep(x)\ndeep2(x)\ninner(tainted, resolve)\ninner(x)\nmyWeirdInner(x)\nsafe(x) |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | enclosingFunctionBody | foo document location search Object assign foo foo _ pick foo foo foo foo join join $ val foo JSON parse foo /bla/ test foo console log foo log info foo localStorage setItem foo e $ myId html e |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | enclosingFunctionName |  |
| autogenerated/Xss/ExceptionXss/exception-xss.js:213:18:213:18 | e | fileImports | express fs |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:0 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:0 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | doc | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | doc | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | format | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | format | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt3 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | markdownIt3 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | marked | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | marked | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | marked | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark2rehype | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark2rehype | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | remark2rehype | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | sanitize | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | sanitize | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | snarkdown2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | table | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | table | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | unified | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:1:1:1 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:11 | express | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:11 | express | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:5:1:32 | express ... press') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:21 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:21 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | exceptional return of require('express') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | require('express') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:15:1:32 | require('express') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:1:23:1:31 | 'express' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:7 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:7 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app = express() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:5:3:19 | app = express() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:17 | express | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:17 | express | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | exceptional return of express() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | express() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:3:11:3:19 | express() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:5:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | app.get ... \\n  }\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:1:14:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:5:5:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:5:5:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:9:5:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | moreBadStuff | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | moreBadStuff | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | this | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:5:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | exceptional return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | functio ... ;\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:22:14:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:31:5:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:5:36:5:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:7:6:35 | !isVali ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:7:6:35 | !isVali ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:7:6:35 | !isVali ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:7:6:35 | !isVali ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:7:6:35 | !isVali ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:20 | isValidUserId | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:20 | isValidUserId | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:20 | isValidUserId | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:20 | isValidUserId | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:20 | isValidUserId | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | exceptional return of isValid ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | exceptional return of isValid ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | exceptional return of isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | exceptional return of isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | exceptional return of isValid ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | isValid ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | isValid ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:8:6:35 | isValid ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:24 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:24 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:24 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:31 | req.params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:31 | req.params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:22:6:31 | req.params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:26:6:31 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:26:6:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:26:6:31 | params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:26:6:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:26:6:31 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:33:6:34 | id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:33:6:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:33:6:34 | id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:33:6:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:6:33:6:34 | id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:7 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:7 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:7 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:12 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:12 | res.send | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:12 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | exceptional return of res.sen ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | res.sen ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:5:8:46 | res.sen ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:9:8:12 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:9:8:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:9:8:12 | send | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:9:8:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:9:8:12 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:29 | "Unknown user: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:14:8:45 | "Unknow ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:35 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:35 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:35 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:42 | req.params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:42 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:42 | req.params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:42 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:42 | req.params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:33:8:45 | req.params.id | stringConcatenatedWith | 'Unknown user: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:37:8:42 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:37:8:42 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:37:8:42 | params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:37:8:42 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:37:8:42 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:44:8:45 | id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:44:8:45 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:44:8:45 | id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:44:8:45 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:8:44:8:45 | id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:16 | moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:16 | moreBadStuff | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:16 | moreBadStuff | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:16 | moreBadStuff | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:16 | moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | exceptional return of moreBad ... s, res) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | exceptional return of moreBad ... s, res) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | exceptional return of moreBad ... s, res) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | exceptional return of moreBad ... s, res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | exceptional return of moreBad ... s, res) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | moreBad ... s, res) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | moreBad ... s, res) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | moreBad ... s, res) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | moreBad ... s, res) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:5:9:33 | moreBad ... s, res) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:20 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:20 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:20 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:20 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:20 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | CalleeFlexibleAccessPath | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:18:9:27 | req.params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:22:9:27 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:22:9:27 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:22:9:27 | params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:22:9:27 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:22:9:27 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | CalleeFlexibleAccessPath | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  req params id moreBadStuff req params res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:9:30:9:32 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:16:0 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:16:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:16:0 | this | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:16:0 | this | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:16:0 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | 'arguments' object of function moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | 'arguments' object of function moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | 'arguments' object of function moreBadStuff | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | 'arguments' object of function moreBadStuff | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | 'arguments' object of function moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | exceptional return of function moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | exceptional return of function moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | exceptional return of function moreBadStuff | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | exceptional return of function moreBadStuff | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | exceptional return of function moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | return of function moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | return of function moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | return of function moreBadStuff | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | return of function moreBadStuff | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:1:18:1 | return of function moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:10:16:21 | moreBadStuff | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:23:16:28 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:16:31:16:33 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:5 | res | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:5 | res | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:5 | res | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:10 | res.send | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:10 | res.send | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:10 | res.send | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | exceptional return of res.sen ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | res.sen ... ams.id) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | res.sen ... ams.id) | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | res.sen ... ams.id) | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:3:17:40 | res.sen ... ams.id) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:7:17:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:7:17:10 | send | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:7:17:10 | send | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:7:17:10 | send | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:7:17:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:27 | "Unknown user: " | stringConcatenatedWith |  -endpoint- params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:12:17:39 | "Unknow ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:36 | params | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:36 | params | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:36 | params | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:36 | params | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:36 | params | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:31:17:39 | params.id | stringConcatenatedWith | 'Unknown user: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:38:17:39 | id | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:38:17:39 | id | contextSurroundingFunctionParameters | (params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:38:17:39 | id | enclosingFunctionBody | params res res send Unknown user:  params id |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:38:17:39 | id | enclosingFunctionName | moreBadStuff |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:17:38:17:39 | id | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:10 | marked | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:10 | marked | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:10 | marked | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:10 | marked | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked  ... arked") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked  ... arked") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:5:20:30 | marked  ... arked") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:20 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:20 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | exceptional return of require("marked") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | exceptional return of require("marked") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | exceptional return of require("marked") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | require("marked") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | require("marked") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:14:20:30 | require("marked") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:20:22:20:29 | "marked" | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:21:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:1:24:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:5:21:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:5:21:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:5:21:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:9:21:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | marked | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | marked | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | marked | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | marked | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | marked | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | this | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:21:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | return of anonymous function | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:22:24:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:31:21:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:21:36:21:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:5 | res | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:10 | res.send | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:3:22:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:7:22:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:7:22:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:7:22:10 | send | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:7:22:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:7:22:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:14 | req | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:12:22:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:16:22:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:16:22:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:16:22:19 | body | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:16:22:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:22:16:22:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:5 | res | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:10 | res.send | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:3:23:28 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:7:23:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:7:23:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:7:23:10 | send | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:7:23:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:7:23:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:17 | marked | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:17 | marked | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:17 | marked | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:17 | marked | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:17 | marked | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | exceptional return of marked(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | exceptional return of marked(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | exceptional return of marked(req.body) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | exceptional return of marked(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | exceptional return of marked(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:12:23:27 | marked(req.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:21 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:21 | req | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:21 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:21 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | CalleeFlexibleAccessPath | marked |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | calleeImports | marked |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:19:23:26 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:23:23:26 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:23:23:26 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:23:23:26 | body | enclosingFunctionBody | req res res send req body res send marked req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:23:23:26 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:23:23:23:26 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:9 | table | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:9 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:9 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:9 | table | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table = ... table') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table = ... table') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:5:27:37 | table = ... table') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:19 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:19 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | exceptional return of require ... table') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | exceptional return of require ... table') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | exceptional return of require ... table') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | require ... table') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | require ... table') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:13:27:37 | require ... table') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:27:21:27:36 | 'markdown-table' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:28:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:1:35:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:5:28:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:5:28:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:5:28:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:9:28:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | table | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | table | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | table | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | table | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | table | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | this | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:28:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | return of anonymous function | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:22:35:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:31:28:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:28:36:28:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:5 | res | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:10 | res.send | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:3:29:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:7:29:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:7:29:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:7:29:10 | send | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:7:29:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:7:29:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:14 | req | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:12:29:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:16:29:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:16:29:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:16:29:19 | body | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:16:29:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:29:16:29:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:30:13 | mytable | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:30:13 | mytable | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:30:13 | mytable | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:30:13 | mytable | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:30:13 | mytable | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable ... y]\\n  ]) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable ... y]\\n  ]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable ... y]\\n  ]) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable ... y]\\n  ]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:7:33:4 | mytable ... y]\\n  ]) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:30:21 | table | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:30:21 | table | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:30:21 | table | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:30:21 | table | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:30:21 | table | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | exceptional return of table([ ... y]\\n  ]) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | exceptional return of table([ ... y]\\n  ]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | exceptional return of table([ ... y]\\n  ]) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | exceptional return of table([ ... y]\\n  ]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | exceptional return of table([ ... y]\\n  ]) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | table([ ... y]\\n  ]) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | table([ ... y]\\n  ]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | table([ ... y]\\n  ]) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | table([ ... y]\\n  ]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:17:33:4 | table([ ... y]\\n  ]) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | CalleeFlexibleAccessPath | table |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | calleeImports | markdown-table |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:30:23:33:3 | [\\n    [ ... dy]\\n  ] | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:5:31:23 | ['Name', 'Content'] | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:6:31:11 | 'Name' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:31:14:31:22 | 'Content' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:5:32:22 | ['body', req.body] | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:6:32:11 | 'body' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:16 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:16 | req | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:16 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:14:32:21 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:18:32:21 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:18:32:21 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:18:32:21 | body | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:18:32:21 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:32:18:32:21 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:5 | res | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:10 | res.send | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | exceptional return of res.send(mytable) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | exceptional return of res.send(mytable) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | exceptional return of res.send(mytable) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | exceptional return of res.send(mytable) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | exceptional return of res.send(mytable) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | res.send(mytable) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | res.send(mytable) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | res.send(mytable) | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | res.send(mytable) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:3:34:19 | res.send(mytable) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:7:34:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:7:34:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:7:34:10 | send | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:7:34:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:7:34:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | enclosingFunctionBody | req res res send req body mytable table Name Content body req body res send mytable |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:34:12:34:18 | mytable | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:12 | showdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:12 | showdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:12 | showdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdow ... wdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdow ... wdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdow ... wdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:5:37:35 | showdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:23 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:23 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | exceptional return of require('showdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | exceptional return of require('showdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | exceptional return of require('showdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | require('showdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | require('showdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:17:37:35 | require('showdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:37:25:37:34 | 'showdown' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:13 | converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:13 | converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:13 | converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:13 | converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | convert ... erter() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | convert ... erter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | convert ... erter() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:5:38:40 | converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | exceptional return of new sho ... erter() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | exceptional return of new sho ... erter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | exceptional return of new sho ... erter() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | new sho ... erter() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | new sho ... erter() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:17:38:40 | new sho ... erter() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:28 | showdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:28 | showdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:28 | showdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:38 | showdown.Converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:38 | showdown.Converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:21:38:38 | showdown.Converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:30:38:38 | Converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:30:38:38 | Converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:38:30:38:38 | Converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:40:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:1:43:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:5:40:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:5:40:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:5:40:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:9:40:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | converter | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | converter | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | converter | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | this | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:40:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | return of anonymous function | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:22:43:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:31:40:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:40:36:40:38 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:5 | res | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:10 | res.send | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:3:41:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:7:41:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:7:41:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:7:41:10 | send | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:7:41:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:7:41:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:14 | req | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:12:41:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:16:41:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:16:41:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:16:41:19 | body | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:16:41:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:41:16:41:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:5 | res | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:10 | res.send | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:3:42:40 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:7:42:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:7:42:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:7:42:10 | send | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:7:42:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:7:42:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:20 | converter | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:20 | converter | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:20 | converter | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:20 | converter | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:20 | converter | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:29 | converter.makeHtml | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:29 | converter.makeHtml | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:29 | converter.makeHtml | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:29 | converter.makeHtml | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:29 | converter.makeHtml | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | convert ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | exceptional return of convert ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | exceptional return of convert ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | exceptional return of convert ... q.body) | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | exceptional return of convert ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:12:42:39 | exceptional return of convert ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:22:42:29 | makeHtml | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:22:42:29 | makeHtml | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:22:42:29 | makeHtml | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:22:42:29 | makeHtml | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:22:42:29 | makeHtml | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:33 | req | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | CalleeFlexibleAccessPath | converter.makeHtml |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | calleeImports | showdown |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:31:42:38 | req.body | receiverName | converter |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:35:42:38 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:35:42:38 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:35:42:38 | body | enclosingFunctionBody | req res res send req body res send converter makeHtml req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:35:42:38 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:42:35:42:38 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:11 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:11 | unified | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:11 | unified | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:11 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified ... ified') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified ... ified') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:5:45:32 | unified ... ified') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:21 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:21 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | exceptional return of require('unified') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | exceptional return of require('unified') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | exceptional return of require('unified') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | require('unified') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | require('unified') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:15:45:32 | require('unified') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:45:23:45:31 | 'unified' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:12 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:12 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:12 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:12 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdow ... parse') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdow ... parse') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdow ... parse') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:5:46:38 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:22 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:22 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | exceptional return of require ... parse') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | exceptional return of require ... parse') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | exceptional return of require ... parse') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | require ... parse') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | require ... parse') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:16:46:38 | require ... parse') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:46:24:46:37 | 'remark-parse' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:17 | remark2rehype | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:17 | remark2rehype | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:17 | remark2rehype | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:17 | remark2rehype | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2 ... ehype') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2 ... ehype') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2 ... ehype') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2rehype | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2rehype | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:5:47:44 | remark2rehype | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:27 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:27 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | exceptional return of require ... ehype') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | exceptional return of require ... ehype') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | exceptional return of require ... ehype') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | require ... ehype') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | require ... ehype') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:21:47:44 | require ... ehype') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:47:29:47:43 | 'remark-rehype' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:7 | doc | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:7 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:7 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:7 | doc | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc = r ... ument') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc = r ... ument') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:5:48:36 | doc = r ... ument') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:17 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:17 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:17 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | exceptional return of require ... ument') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | exceptional return of require ... ument') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | exceptional return of require ... ument') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | require ... ument') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | require ... ument') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:11:48:36 | require ... ument') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:48:19:48:35 | 'rehype-document' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:10 | format | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:10 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:10 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:10 | format | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format  ... ormat') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format  ... ormat') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:5:49:37 | format  ... ormat') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:20 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:20 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | exceptional return of require ... ormat') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | exceptional return of require ... ormat') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | exceptional return of require ... ormat') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | require ... ormat') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | require ... ormat') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:14:49:37 | require ... ormat') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:49:22:49:36 | 'rehype-format' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:8 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:8 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:8 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:8 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html =  ... ngify') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html =  ... ngify') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:5:50:38 | html =  ... ngify') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:18 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:18 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | exceptional return of require ... ngify') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | exceptional return of require ... ngify') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | exceptional return of require ... ngify') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | require ... ngify') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | require ... ngify') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:12:50:38 | require ... ngify') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:50:20:50:37 | 'rehype-stringify' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:10 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:10 | remark | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:10 | remark | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:10 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark  ... emark") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark  ... emark") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:5:51:30 | remark  ... emark") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:20 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:20 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | exceptional return of require("remark") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | exceptional return of require("remark") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | exceptional return of require("remark") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | require("remark") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | require("remark") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:14:51:30 | require("remark") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:51:22:51:29 | "remark" | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:12 | sanitize | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:12 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:12 | sanitize | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitiz ... itize") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitiz ... itize") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitiz ... itize") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitize | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:5:52:41 | sanitize | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:22 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:22 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | exceptional return of require ... itize") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | exceptional return of require ... itize") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | exceptional return of require ... itize") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | require ... itize") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | require ... itize") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:16:52:41 | require ... itize") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:52:24:52:40 | "rehype-sanitize" | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:25 | { resetExtensions } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:25 | { resetExtensions } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:25 | { resetExtensions } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:47 | { reset ... wdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:47 | { reset ... wdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:7:53:47 | { reset ... wdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:9:53:23 | resetExtensions | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:35 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:35 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:35 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | exceptional return of require('showdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | exceptional return of require('showdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | exceptional return of require('showdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | require('showdown') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | require('showdown') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:29:53:47 | require('showdown') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:53:37:53:46 | 'showdown' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:55:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | app.get ...   })\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | app.get ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | app.get ...   })\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | exceptional return of app.get ...   })\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | exceptional return of app.get ...   })\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:1:77:2 | exceptional return of app.get ...   })\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:5:55:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:5:55:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:5:55:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:9:55:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | doc | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | doc | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | doc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | doc | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | format | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | format | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | format | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | html | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | markdown | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | markdown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark2rehype | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark2rehype | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark2rehype | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark2rehype | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | remark2rehype | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | sanitize | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | sanitize | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | sanitize | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | sanitize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | sanitize | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | this | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | unified | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | unified | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | unified | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:21 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:22 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:22 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:22 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:22 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:55:22 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | functio ... \\n  })\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:22:77:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:32:55:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:55:37:55:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:5 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:10 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:3:56:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:7:56:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:7:56:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:7:56:10 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:7:56:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:7:56:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:14 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:12:56:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:16:56:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:16:56:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:16:56:19 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:16:56:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:56:16:56:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:9 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:9 | unified | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:9 | unified | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:9 | unified | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:9 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | exceptional return of unified() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | exceptional return of unified() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | exceptional return of unified() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | exceptional return of unified() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | exceptional return of unified() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | unified() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | unified() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | unified() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | unified() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:58:11 | unified() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:8 | unified()\\n    .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:8 | unified()\\n    .use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:8 | unified()\\n    .use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:8 | unified()\\n    .use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:8 | unified()\\n    .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | exceptional return of unified ... rkdown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | exceptional return of unified ... rkdown) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | exceptional return of unified ... rkdown) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | exceptional return of unified ... rkdown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | exceptional return of unified ... rkdown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | unified ... rkdown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | unified ... rkdown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | unified ... rkdown) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | unified ... rkdown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:59:18 | unified ... rkdown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:8 | unified ...    .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:8 | unified ...    .use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:8 | unified ...    .use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:8 | unified ...    .use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:8 | unified ...    .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | exceptional return of unified ... rehype) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | exceptional return of unified ... rehype) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | exceptional return of unified ... rehype) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | exceptional return of unified ... rehype) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | exceptional return of unified ... rehype) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | unified ... rehype) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | unified ... rehype) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | unified ... rehype) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | unified ... rehype) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:60:23 | unified ... rehype) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:8 | unified ...    .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:8 | unified ...    .use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:8 | unified ...    .use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:8 | unified ...    .use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:8 | unified ...    .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | exceptional return of unified ... \\udc4b\\u1f30d\\udf0d' }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | exceptional return of unified ... \\udc4b\\u1f30d\\udf0d' }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | exceptional return of unified ... \\udc4b\\u1f30d\\udf0d' }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | exceptional return of unified ... \\udc4b\\u1f30d\\udf0d' }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | exceptional return of unified ... \\udc4b\\u1f30d\\udf0d' }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | unified ... \\udc4b\\u1f30d\\udf0d' }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | unified ... \\udc4b\\u1f30d\\udf0d' }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | unified ... \\udc4b\\u1f30d\\udf0d' }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | unified ... \\udc4b\\u1f30d\\udf0d' }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:61:32 | unified ... \\udc4b\\u1f30d\\udf0d' }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:8 | unified ...    .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:8 | unified ...    .use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:8 | unified ...    .use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:8 | unified ...    .use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:8 | unified ...    .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | exceptional return of unified ... format) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | exceptional return of unified ... format) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | exceptional return of unified ... format) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | exceptional return of unified ... format) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | exceptional return of unified ... format) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | unified ... format) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | unified ... format) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | unified ... format) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | unified ... format) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:62:16 | unified ... format) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:8 | unified ...    .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:8 | unified ...    .use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:8 | unified ...    .use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:8 | unified ...    .use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:8 | unified ...    .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | exceptional return of unified ... e(html) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | exceptional return of unified ... e(html) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | exceptional return of unified ... e(html) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | exceptional return of unified ... e(html) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | exceptional return of unified ... e(html) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | unified ... e(html) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | unified ... e(html) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | unified ... e(html) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | unified ... e(html) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:63:14 | unified ... e(html) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:64:12 | unified ... process | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:64:12 | unified ... process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:64:12 | unified ... process | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:64:12 | unified ... process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:64:12 | unified ... process | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | exceptional return of unified ... \\n    }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | exceptional return of unified ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | exceptional return of unified ... \\n    }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | exceptional return of unified ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | exceptional return of unified ... \\n    }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | unified ... \\n    }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | unified ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | unified ... \\n    }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | unified ... \\n    }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:58:3:66:6 | unified ... \\n    }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:6:59:8 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:6:59:8 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:6:59:8 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:6:59:8 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:6:59:8 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | CalleeFlexibleAccessPath | unified().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:59:10:59:17 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:6:60:8 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:6:60:8 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:6:60:8 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:6:60:8 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:6:60:8 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | CalleeFlexibleAccessPath | unified().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:60:10:60:22 | remark2rehype | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:6:61:8 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:6:61:8 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:6:61:8 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:6:61:8 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:6:61:8 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | CalleeFlexibleAccessPath | unified().use().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:10:61:12 | doc | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | CalleeFlexibleAccessPath | unified().use().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:15:61:31 | { title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:21 | title | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:21 | title | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:21 | title | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:21 | title | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:21 | title | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:17:61:29 | title: '\\u1f44b\\udc4b\\u1f30d\\udf0d' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | CalleeFlexibleAccessPath | unified().use().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | InputAccessPathFromCallee | 1.title |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | assignedToPropName | title |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:61:24:61:29 | '\\u1f44b\\udc4b\\u1f30d\\udf0d' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:6:62:8 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:6:62:8 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:6:62:8 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:6:62:8 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:6:62:8 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | CalleeFlexibleAccessPath | unified().use().use().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:62:10:62:15 | format | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:6:63:8 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:6:63:8 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:6:63:8 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:6:63:8 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:6:63:8 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | CalleeFlexibleAccessPath | unified().use().use().use().use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:63:10:63:13 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:6:64:12 | process | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:6:64:12 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:6:64:12 | process | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:6:64:12 | process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:6:64:12 | process | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:16 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:16 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:16 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:16 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | CalleeFlexibleAccessPath | unified().use().use().use().use().use().process |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:14:64:21 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:18:64:21 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:18:64:21 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:18:64:21 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:18:64:21 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:18:64:21 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | this | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:64:23 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | unified().use().use().use().use().use().process |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | functio ... K\\n    } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:24:66:5 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:34:64:36 | err | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:34:64:36 | err | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:34:64:36 | err | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:34:64:36 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:34:64:36 | err | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:64:39:64:42 | file | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:9 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:9 | res | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:9 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:9 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:9 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:14 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:14 | res.send | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:14 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:14 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:14 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | exceptional return of res.send(file) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | exceptional return of res.send(file) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | exceptional return of res.send(file) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | exceptional return of res.send(file) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | exceptional return of res.send(file) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | res.send(file) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | res.send(file) | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | res.send(file) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | res.send(file) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:7:65:20 | res.send(file) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:11:65:14 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:11:65:14 | send | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:11:65:14 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:11:65:14 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:11:65:14 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | contextSurroundingFunctionParameters | (req, res)\n(err, file) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:65:16:65:19 | file | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:5 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:10 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | exceptional return of res.sen ... ring()) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | exceptional return of res.sen ... ring()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | exceptional return of res.sen ... ring()) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | exceptional return of res.sen ... ring()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | exceptional return of res.sen ... ring()) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | res.sen ... ring()) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | res.sen ... ring()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | res.sen ... ring()) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | res.sen ... ring()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:3:68:53 | res.sen ... ring()) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:7:68:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:7:68:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:7:68:10 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:7:68:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:7:68:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:17 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:17 | remark | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:17 | remark | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:17 | remark | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:17 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | exceptional return of remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | exceptional return of remark() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | exceptional return of remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | exceptional return of remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | exceptional return of remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | remark() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:19 | remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:31 | remark().processSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:31 | remark().processSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:31 | remark().processSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:31 | remark().processSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:31 | remark().processSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | exceptional return of remark( ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | exceptional return of remark( ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | exceptional return of remark( ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | exceptional return of remark( ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | exceptional return of remark( ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | remark( ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | remark( ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | remark( ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | remark( ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:41 | remark( ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:50 | remark( ... oString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:50 | remark( ... oString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:50 | remark( ... oString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:50 | remark( ... oString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:50 | remark( ... oString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | exceptional return of remark( ... tring() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | exceptional return of remark( ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | exceptional return of remark( ... tring() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | exceptional return of remark( ... tring() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | exceptional return of remark( ... tring() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:12:68:52 | remark( ... tring() | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:21:68:31 | processSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:21:68:31 | processSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:21:68:31 | processSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:21:68:31 | processSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:21:68:31 | processSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:35 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:35 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:35 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | CalleeFlexibleAccessPath | remark().processSync |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | calleeImports | remark |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:33:68:40 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:37:68:40 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:37:68:40 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:37:68:40 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:37:68:40 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:37:68:40 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:43:68:50 | toString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:43:68:50 | toString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:43:68:50 | toString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:43:68:50 | toString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:68:43:68:50 | toString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:5 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:10 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | exceptional return of res.sen ... ring()) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | exceptional return of res.sen ... ring()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | exceptional return of res.sen ... ring()) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | exceptional return of res.sen ... ring()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | exceptional return of res.sen ... ring()) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | res.sen ... ring()) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | res.sen ... ring()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | res.sen ... ring()) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | res.sen ... ring()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:3:70:67 | res.sen ... ring()) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:7:70:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:7:70:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:7:70:10 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:7:70:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:7:70:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:17 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:17 | remark | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:17 | remark | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:17 | remark | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:17 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | exceptional return of remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | exceptional return of remark() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | exceptional return of remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | exceptional return of remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | exceptional return of remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | remark() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:19 | remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:23 | remark().use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:23 | remark().use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:23 | remark().use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:23 | remark().use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:23 | remark().use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | exceptional return of remark( ... nitize) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | exceptional return of remark( ... nitize) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | exceptional return of remark( ... nitize) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | exceptional return of remark( ... nitize) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | exceptional return of remark( ... nitize) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | remark( ... nitize) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | remark( ... nitize) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | remark( ... nitize) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | remark( ... nitize) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:33 | remark( ... nitize) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:45 | remark( ... essSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:45 | remark( ... essSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:45 | remark( ... essSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:45 | remark( ... essSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:45 | remark( ... essSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | exceptional return of remark( ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | exceptional return of remark( ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | exceptional return of remark( ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | exceptional return of remark( ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | exceptional return of remark( ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | remark( ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | remark( ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | remark( ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | remark( ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:55 | remark( ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:64 | remark( ... oString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:64 | remark( ... oString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:64 | remark( ... oString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:64 | remark( ... oString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:64 | remark( ... oString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | exceptional return of remark( ... tring() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | exceptional return of remark( ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | exceptional return of remark( ... tring() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | exceptional return of remark( ... tring() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | exceptional return of remark( ... tring() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:12:70:66 | remark( ... tring() | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:21:70:23 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:21:70:23 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:21:70:23 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:21:70:23 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:21:70:23 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | CalleeFlexibleAccessPath | remark().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | calleeImports | remark |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:25:70:32 | sanitize | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:35:70:45 | processSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:35:70:45 | processSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:35:70:45 | processSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:35:70:45 | processSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:35:70:45 | processSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:49 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:49 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:49 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:49 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:49 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | CalleeFlexibleAccessPath | remark().use().processSync |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | calleeImports | remark |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:47:70:54 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:51:70:54 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:51:70:54 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:51:70:54 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:51:70:54 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:51:70:54 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:57:70:64 | toString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:57:70:64 | toString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:57:70:64 | toString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:57:70:64 | toString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:70:57:70:64 | toString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:5 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:10 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | exceptional return of res.sen ... String) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | exceptional return of res.sen ... String) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | exceptional return of res.sen ... String) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | exceptional return of res.sen ... String) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | exceptional return of res.sen ... String) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | res.sen ... String) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | res.sen ... String) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | res.sen ... String) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | res.sen ... String) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:3:72:66 | res.sen ... String) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:7:72:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:7:72:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:7:72:10 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:7:72:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:7:72:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:18 | unified | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:18 | unified | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:18 | unified | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:18 | unified | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:18 | unified | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | exceptional return of unified() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | exceptional return of unified() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | exceptional return of unified() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | exceptional return of unified() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | exceptional return of unified() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | unified() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | unified() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | unified() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | unified() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:20 | unified() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:24 | unified().use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:24 | unified().use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:24 | unified().use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:24 | unified().use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:24 | unified().use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | exceptional return of unified ... rkdown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | exceptional return of unified ... rkdown) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | exceptional return of unified ... rkdown) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | exceptional return of unified ... rkdown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | exceptional return of unified ... rkdown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | unified ... rkdown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | unified ... rkdown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | unified ... rkdown) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | unified ... rkdown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:34 | unified ... rkdown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:46 | unified ... essSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:46 | unified ... essSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:46 | unified ... essSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:46 | unified ... essSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:46 | unified ... essSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | exceptional return of unified ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | exceptional return of unified ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | exceptional return of unified ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | exceptional return of unified ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | exceptional return of unified ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | unified ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | unified ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | unified ... q.body) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | unified ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:56 | unified ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:12:72:65 | unified ... oString | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:22:72:24 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:22:72:24 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:22:72:24 | use | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:22:72:24 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:22:72:24 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | CalleeFlexibleAccessPath | unified().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:26:72:33 | markdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:36:72:46 | processSync | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:36:72:46 | processSync | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:36:72:46 | processSync | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:36:72:46 | processSync | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:36:72:46 | processSync | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:50 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:50 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:50 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:50 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:50 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | CalleeFlexibleAccessPath | unified().use().processSync |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | calleeImports | unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:48:72:55 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:52:72:55 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:52:72:55 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:52:72:55 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:52:72:55 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:52:72:55 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:58:72:65 | toString | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:58:72:65 | toString | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:58:72:65 | toString | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:58:72:65 | toString | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:72:58:72:65 | toString | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:8 | remark | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:8 | remark | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:8 | remark | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:8 | remark | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:8 | remark | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | exceptional return of remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | exceptional return of remark() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | exceptional return of remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | exceptional return of remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | exceptional return of remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | remark() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | remark() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | remark() | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | remark() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:10 | remark() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:18 | remark().process | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:18 | remark().process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:18 | remark().process | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:18 | remark().process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:74:18 | remark().process | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | exceptional return of remark( ... OK\\n  }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | exceptional return of remark( ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | exceptional return of remark( ... OK\\n  }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | exceptional return of remark( ... OK\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | exceptional return of remark( ... OK\\n  }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | remark( ... OK\\n  }) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | remark( ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | remark( ... OK\\n  }) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | remark( ... OK\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:3:76:4 | remark( ... OK\\n  }) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:12:74:18 | process | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:12:74:18 | process | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:12:74:18 | process | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:12:74:18 | process | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:12:74:18 | process | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:22 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:22 | req | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:22 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | CalleeFlexibleAccessPath | remark().process |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | calleeImports | remark |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:20:74:27 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:24:74:27 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:24:74:27 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:24:74:27 | body | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:24:74:27 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:24:74:27 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:74:29 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:74:29 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:74:29 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:74:29 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:74:29 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | CalleeFlexibleAccessPath | remark().process |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | calleeImports | remark |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | (e, f)  ...  OK\\n  } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | return of anonymous function | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:30:76:3 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:31:74:31 | e | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:31:74:31 | e | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:31:74:31 | e | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:31:74:31 | e | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:31:74:31 | e | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:74:34:74:34 | f | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:7 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:7 | res | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:7 | res | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:7 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:12 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:12 | res.send | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:12 | res.send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:12 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | exceptional return of res.send(f) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | exceptional return of res.send(f) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | exceptional return of res.send(f) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | exceptional return of res.send(f) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | exceptional return of res.send(f) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | res.send(f) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | res.send(f) | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | res.send(f) | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | res.send(f) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:5:75:15 | res.send(f) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:9:75:12 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:9:75:12 | send | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:9:75:12 | send | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:9:75:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:9:75:12 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | contextSurroundingFunctionParameters | (req, res)\n(e, f) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | enclosingFunctionBody | req res res send req body unified use markdown use remark2rehype use doc title \ud83d\udc4b\ud83c\udf0d use format use html process req body err file res send file res send remark processSync req body toString res send remark use sanitize processSync req body toString res send unified use markdown processSync req body toString remark process req body e f res send f |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:75:14:75:14 | f | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:1:79:34 | import  ... kdown'; | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:1:79:34 | import  ... kdown'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:1:79:34 | import  ... kdown'; | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:8:79:16 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:23:79:33 | 'snarkdown' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:23:79:33 | 'snarkdown' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:79:23:79:33 | 'snarkdown' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:14 | snarkdown2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:14 | snarkdown2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:14 | snarkdown2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:14 | snarkdown2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdo ... kdown") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdo ... kdown") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdo ... kdown") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdown2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdown2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:5:80:37 | snarkdown2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:24 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:24 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | exceptional return of require("snarkdown") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | exceptional return of require("snarkdown") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | exceptional return of require("snarkdown") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | require("snarkdown") | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | require("snarkdown") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:18:80:37 | require("snarkdown") | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:80:26:80:36 | "snarkdown" | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:82:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:1:86:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:5:82:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:5:82:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:5:82:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:9:82:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown2 | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | snarkdown2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | this | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:82:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | return of anonymous function | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:22:86:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:32:82:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:82:37:82:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:5 | res | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:10 | res.send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:3:83:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:7:83:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:7:83:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:7:83:10 | send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:7:83:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:7:83:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:14 | req | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:12:83:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:16:83:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:16:83:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:16:83:19 | body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:16:83:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:83:16:83:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:5 | res | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:10 | res.send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:3:84:31 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:7:84:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:7:84:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:7:84:10 | send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:7:84:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:7:84:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:20 | snarkdown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:20 | snarkdown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:20 | snarkdown | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:20 | snarkdown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:20 | snarkdown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | exceptional return of snarkdown(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | exceptional return of snarkdown(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | exceptional return of snarkdown(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | exceptional return of snarkdown(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | exceptional return of snarkdown(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:12:84:30 | snarkdown(req.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:24 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:24 | req | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:24 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | CalleeFlexibleAccessPath | snarkdown |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | calleeImports | snarkdown |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:22:84:29 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:26:84:29 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:26:84:29 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:26:84:29 | body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:26:84:29 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:84:26:84:29 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:5 | res | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:10 | res.send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:3:85:32 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:7:85:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:7:85:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:7:85:10 | send | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:7:85:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:7:85:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:21 | snarkdown2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:21 | snarkdown2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:21 | snarkdown2 | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:21 | snarkdown2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:21 | snarkdown2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | exceptional return of snarkdown2(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | exceptional return of snarkdown2(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | exceptional return of snarkdown2(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | exceptional return of snarkdown2(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | exceptional return of snarkdown2(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:12:85:31 | snarkdown2(req.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:25 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:25 | req | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:25 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | CalleeFlexibleAccessPath | snarkdown2 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | calleeImports | snarkdown |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:23:85:30 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:27:85:30 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:27:85:30 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:27:85:30 | body | enclosingFunctionBody | req res res send req body res send snarkdown req body res send snarkdown2 req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:27:85:30 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:85:27:85:30 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:88:16 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:88:16 | markdownIt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:88:16 | markdownIt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:88:16 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdow ... true\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdow ... true\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdow ... true\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdownIt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:7:90:2 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:26 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:26 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | exceptional return of require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | exceptional return of require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | exceptional return of require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:88:41 | require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | exceptional return of require ... true\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | exceptional return of require ... true\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | exceptional return of require ... true\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | require ... true\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | require ... true\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:20:90:2 | require ... true\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:28:88:40 | 'markdown-it' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:88:43:90:1 | {\\n  html: true\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:6 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:6 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:6 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:3:89:12 | html: true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | assignedToPropName | html |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:89:9:89:12 | true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:17 | markdownIt2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:17 | markdownIt2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:17 | markdownIt2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:17 | markdownIt2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdow ... t')({}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdow ... t')({}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdow ... t')({}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdownIt2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdownIt2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:7:91:46 | markdownIt2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:27 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:27 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | exceptional return of require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | exceptional return of require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | exceptional return of require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:42 | require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | exceptional return of require ... t')({}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | exceptional return of require ... t')({}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | exceptional return of require ... t')({}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | require ... t')({}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | require ... t')({}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:21:91:46 | require ... t')({}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:29:91:41 | 'markdown-it' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:91:44:91:45 | {} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:93:17 | markdownIt3 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:93:17 | markdownIt3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:93:17 | markdownIt3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:93:17 | markdownIt3 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdow ... htjs')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdow ... htjs')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdow ... htjs')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdownIt3 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdownIt3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:7:94:42 | markdownIt3 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:27 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:27 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | exceptional return of require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | exceptional return of require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | exceptional return of require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | require ... wn-it') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:42 | require ... wn-it') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | exceptional return of require ...  true}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | exceptional return of require ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | exceptional return of require ...  true}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | require ...  true}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | require ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:93:56 | require ...  true}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:6 | require ... \\n  .use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:6 | require ... \\n  .use | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:6 | require ... \\n  .use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | exceptional return of require ... htjs')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | exceptional return of require ... htjs')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | exceptional return of require ... htjs')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | require ... htjs')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | require ... htjs')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:21:94:42 | require ... htjs')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:29:93:41 | 'markdown-it' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:44:93:55 | {html: true} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:48 | html | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:48 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:48 | html | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:45:93:54 | html: true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | assignedToPropName | html |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:93:51:93:54 | true | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:4:94:6 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:4:94:6 | use | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:4:94:6 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:14 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:14 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:14 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | exceptional return of require ... ghtjs') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | exceptional return of require ... ghtjs') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | exceptional return of require ... ghtjs') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | CalleeFlexibleAccessPath | import(!)().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:8:94:41 | require ... ghtjs') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:94:16:94:40 | 'markdo ... ightjs' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:3 | app | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:3 | app | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:7 | app.get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:96:7 | app.get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:1:104:2 | exceptional return of app.get ... T OK\\n}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:5:96:7 | get | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:5:96:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:5:96:7 | get | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:9:96:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt2 | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt3 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt3 | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | markdownIt3 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | require | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | require | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | this | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:96:21 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | 'arguments' object of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | exceptional return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | exceptional return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | return of anonymous function | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | return of anonymous function | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:22:104:1 | return of anonymous function | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:32:96:34 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:96:37:96:39 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | exceptional return of res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | exceptional return of res.send(req.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | exceptional return of res.send(req.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | exceptional return of res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | exceptional return of res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | res.send(req.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | res.send(req.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | res.send(req.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | res.send(req.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:3:97:20 | res.send(req.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:7:97:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:7:97:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:7:97:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:7:97:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:7:97:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:14 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:14 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:14 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:12:97:19 | req.body | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:16:97:19 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:16:97:19 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:16:97:19 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:16:97:19 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:97:16:97:19 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:3:98:39 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:7:98:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:7:98:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:7:98:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:7:98:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:7:98:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:21 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:21 | markdownIt | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:21 | markdownIt | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:21 | markdownIt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:21 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:28 | markdownIt.render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:28 | markdownIt.render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:28 | markdownIt.render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:28 | markdownIt.render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:28 | markdownIt.render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | exceptional return of markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | exceptional return of markdow ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | exceptional return of markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | exceptional return of markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | exceptional return of markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:12:98:38 | markdow ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:23:98:28 | render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:23:98:28 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:23:98:28 | render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:23:98:28 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:23:98:28 | render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:32 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:32 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:32 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:32 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:32 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | CalleeFlexibleAccessPath | markdownIt.render |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:30:98:37 | req.body | receiverName | markdownIt |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:34:98:37 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:34:98:37 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:34:98:37 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:34:98:37 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:98:34:98:37 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:3:99:40 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:7:99:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:7:99:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:7:99:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:7:99:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:7:99:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:22 | markdownIt2 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:22 | markdownIt2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:22 | markdownIt2 | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:22 | markdownIt2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:22 | markdownIt2 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:29 | markdownIt2.render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:29 | markdownIt2.render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:29 | markdownIt2.render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:29 | markdownIt2.render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:29 | markdownIt2.render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | exceptional return of markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | exceptional return of markdow ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | exceptional return of markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | exceptional return of markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | exceptional return of markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:12:99:39 | markdow ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:24:99:29 | render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:24:99:29 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:24:99:29 | render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:24:99:29 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:24:99:29 | render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:33 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | CalleeFlexibleAccessPath | markdownIt2.render |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:31:99:38 | req.body | receiverName | markdownIt2 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:35:99:38 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:35:99:38 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:35:99:38 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:35:99:38 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:99:35:99:38 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:3:100:40 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:7:100:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:7:100:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:7:100:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:7:100:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:7:100:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:22 | markdownIt3 | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:22 | markdownIt3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:22 | markdownIt3 | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:22 | markdownIt3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:22 | markdownIt3 | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:29 | markdownIt3.render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:29 | markdownIt3.render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:29 | markdownIt3.render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:29 | markdownIt3.render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:29 | markdownIt3.render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | exceptional return of markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | exceptional return of markdow ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | exceptional return of markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | exceptional return of markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | exceptional return of markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:12:100:39 | markdow ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:24:100:29 | render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:24:100:29 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:24:100:29 | render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:24:100:29 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:24:100:29 | render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:33 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:33 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:33 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | CalleeFlexibleAccessPath | markdownIt3.render |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:31:100:38 | req.body | receiverName | markdownIt3 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:35:100:38 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:35:100:38 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:35:100:38 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:35:100:38 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:100:35:100:38 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:3:102:77 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:7:102:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:7:102:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:7:102:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:7:102:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:7:102:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:21 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:21 | markdownIt | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:21 | markdownIt | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:21 | markdownIt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:21 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:25 | markdownIt.use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:25 | markdownIt.use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:25 | markdownIt.use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:25 | markdownIt.use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:25 | markdownIt.use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | exceptional return of markdow ... izer')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | exceptional return of markdow ... izer')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | exceptional return of markdow ... izer')) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | exceptional return of markdow ... izer')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | exceptional return of markdow ... izer')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | markdow ... izer')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | markdow ... izer')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | markdow ... izer')) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | markdow ... izer')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:59 | markdow ... izer')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:66 | markdow ... .render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:66 | markdow ... .render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:66 | markdow ... .render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:66 | markdow ... .render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:66 | markdow ... .render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | exceptional return of markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | exceptional return of markdow ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | exceptional return of markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | exceptional return of markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | exceptional return of markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:12:102:76 | markdow ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:23:102:25 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:23:102:25 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:23:102:25 | use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:23:102:25 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:23:102:25 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:33 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:33 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:33 | require | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:33 | require | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:33 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | exceptional return of require ... tizer') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | exceptional return of require ... tizer') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | exceptional return of require ... tizer') | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | exceptional return of require ... tizer') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | exceptional return of require ... tizer') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | CalleeFlexibleAccessPath | markdownIt.use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:27:102:58 | require ... tizer') | receiverName | markdownIt |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:35:102:57 | 'markdo ... itizer' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:61:102:66 | render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:61:102:66 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:61:102:66 | render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:61:102:66 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:61:102:66 | render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:70 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:70 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:70 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:70 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:70 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | CalleeFlexibleAccessPath | markdownIt.use().render |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:68:102:75 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:72:102:75 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:72:102:75 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:72:102:75 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:72:102:75 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:102:72:102:75 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:5 | res | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:5 | res | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:5 | res | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:10 | res.send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:10 | res.send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:10 | res.send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | exceptional return of res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | exceptional return of res.sen ... .body)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | exceptional return of res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | exceptional return of res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | exceptional return of res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | res.sen ... .body)) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | res.sen ... .body)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | res.sen ... .body)) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | res.sen ... .body)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:3:103:85 | res.sen ... .body)) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:7:103:10 | send | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:7:103:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:7:103:10 | send | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:7:103:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:7:103:10 | send | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:21 | markdownIt | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:21 | markdownIt | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:21 | markdownIt | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:21 | markdownIt | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:21 | markdownIt | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:25 | markdownIt.use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:25 | markdownIt.use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:25 | markdownIt.use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:25 | markdownIt.use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:25 | markdownIt.use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | exceptional return of markdow ... abbr')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | exceptional return of markdow ... abbr')) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | exceptional return of markdow ... abbr')) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | exceptional return of markdow ... abbr')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | exceptional return of markdow ... abbr')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | markdow ... abbr')) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | markdow ... abbr')) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | markdow ... abbr')) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | markdow ... abbr')) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:54 | markdow ... abbr')) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:58 | markdow ... ')).use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:58 | markdow ... ')).use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:58 | markdow ... ')).use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:58 | markdow ... ')).use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:58 | markdow ... ')).use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | exceptional return of markdow ... nknown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | exceptional return of markdow ... nknown) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | exceptional return of markdow ... nknown) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | exceptional return of markdow ... nknown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | exceptional return of markdow ... nknown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | markdow ... nknown) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | markdow ... nknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | markdow ... nknown) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | markdow ... nknown) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:67 | markdow ... nknown) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:74 | markdow ... .render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:74 | markdow ... .render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:74 | markdow ... .render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:74 | markdow ... .render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:74 | markdow ... .render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | exceptional return of markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | exceptional return of markdow ... q.body) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | exceptional return of markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | exceptional return of markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | exceptional return of markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:12:103:84 | markdow ... q.body) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:23:103:25 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:23:103:25 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:23:103:25 | use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:23:103:25 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:23:103:25 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:33 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:33 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:33 | require | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:33 | require | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:33 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | exceptional return of require ... -abbr') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | exceptional return of require ... -abbr') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | exceptional return of require ... -abbr') | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | exceptional return of require ... -abbr') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | exceptional return of require ... -abbr') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | CalleeFlexibleAccessPath | markdownIt.use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:27:103:53 | require ... -abbr') | receiverName | markdownIt |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:35:103:52 | 'markdown-it-abbr' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:56:103:58 | use | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:56:103:58 | use | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:56:103:58 | use | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:56:103:58 | use | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:56:103:58 | use | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | CalleeFlexibleAccessPath | markdownIt.use().use |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:60:103:66 | unknown | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:69:103:74 | render | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:69:103:74 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:69:103:74 | render | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:69:103:74 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:69:103:74 | render | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:78 | req | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:78 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:78 | req | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:78 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:78 | req | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | CalleeFlexibleAccessPath | markdownIt.use().use().render |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | calleeImports | markdown-it |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:76:103:83 | req.body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:80:103:83 | body | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:80:103:83 | body | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:80:103:83 | body | enclosingFunctionBody | req res res send req body res send markdownIt render req body res send markdownIt2 render req body res send markdownIt3 render req body res send markdownIt use require markdown-it-sanitizer render req body res send markdownIt use require markdown-it-abbr use unknown render req body |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:80:103:83 | body | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:103:80:103:83 | body | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:8 | Hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:8 | Hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:8 | Hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi =  ... 'hapi') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi =  ... 'hapi') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:5:106:26 | Hapi =  ... 'hapi') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:18 | require | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:18 | require | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | exceptional return of require('hapi') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | exceptional return of require('hapi') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | exceptional return of require('hapi') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | require('hapi') | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | require('hapi') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:12:106:26 | require('hapi') | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:106:20:106:25 | 'hapi' | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:8 | hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:8 | hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:8 | hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi =  ... erver() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi =  ... erver() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:5:107:28 | hapi =  ... erver() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | exceptional return of new Hapi.Server() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | exceptional return of new Hapi.Server() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | exceptional return of new Hapi.Server() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | new Hapi.Server() | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | new Hapi.Server() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:12:107:28 | new Hapi.Server() | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:19 | Hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:19 | Hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:19 | Hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:26 | Hapi.Server | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:26 | Hapi.Server | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:16:107:26 | Hapi.Server | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:21:107:26 | Server | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:21:107:26 | Server | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:107:21:107:26 | Server | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:4 | hapi | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:4 | hapi | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:4 | hapi | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:10 | hapi.route | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:10 | hapi.route | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:108:10 | hapi.route | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | exceptional return of hapi.ro ...     }}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | exceptional return of hapi.ro ...     }}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | exceptional return of hapi.ro ...     }}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | hapi.ro ...     }}) | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | hapi.ro ...     }}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:1:111:7 | hapi.ro ...     }}) | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:6:108:10 | route | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:6:108:10 | route | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:6:108:10 | route | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | CalleeFlexibleAccessPath | hapi.route |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | calleeImports | hapi |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:108:12:111:6 | {\\n    h ... \\n    }} | receiverName | hapi |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:109:11 | handler | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:109:11 | handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:109:11 | handler | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:5:111:5 | handler ... K\\n    } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:109:13 | this | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:109:13 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:109:13 | this | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:109:13 | this | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:109:13 | this | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | 'arguments' object of method handler | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | 'arguments' object of method handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | 'arguments' object of method handler | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | 'arguments' object of method handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | 'arguments' object of method handler | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | exceptional return of method handler | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | exceptional return of method handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | exceptional return of method handler | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | exceptional return of method handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | exceptional return of method handler | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | hapi.route |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | InputAccessPathFromCallee | 0.handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | assignedToPropName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | calleeImports | hapi |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | functio ... K\\n    } | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | return of method handler | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | return of method handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | return of method handler | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | return of method handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:14:111:5 | return of method handler | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:109:24:109:30 | request | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:22 | request | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:22 | request | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:22 | request | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:22 | request | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:22 | request | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:28 | request.query | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:28 | request.query | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:28 | request.query | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:28 | request.query | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:28 | request.query | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:30 | request.query.p | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:30 | request.query.p | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:30 | request.query.p | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:30 | request.query.p | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:16:110:30 | request.query.p | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:24:110:28 | query | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:24:110:28 | query | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:24:110:28 | query | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:24:110:28 | query | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:24:110:28 | query | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:30:110:30 | p | contextFunctionInterfaces | handler(request)\nmoreBadStuff(params, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:30:110:30 | p | contextSurroundingFunctionParameters | (request) |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:30:110:30 | p | enclosingFunctionBody | request request query p |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:30:110:30 | p | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/ReflectedXss.js:110:30:110:30 | p | fileImports | express hapi markdown-it markdown-it-abbr markdown-it-highlightjs markdown-it-sanitizer markdown-table marked rehype-document rehype-format rehype-sanitize rehype-stringify remark remark-parse remark-rehype showdown snarkdown unified |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:0 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | require | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:1:1:1 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:11 | express | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:11 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:5:1:32 | express ... press') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:21 | require | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:21 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | exceptional return of require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | require('express') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:15:1:32 | require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:1:23:1:31 | 'express' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:7 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:7 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app = express() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:5:2:19 | app = express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:17 | express | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:17 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | exceptional return of express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | express() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:2:11:2:19 | express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:4:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:1:12:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:5:4:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:5:4:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:5:4:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:9:4:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:4:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:4:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:4:21 | this | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:4:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:4:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | exceptional return of anonymous function | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | functio ... .\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | return of anonymous function | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:22:12:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:32:4:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:4:37:4:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:5:7:5:14 | whatever | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:5:7:5:14 | whatever | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:5:7:5:14 | whatever | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:5:7:5:14 | whatever | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:5:7:5:14 | whatever | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:7 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:11 | res.set | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:11 | res.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:11 | res.set | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:11 | res.set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:11 | res.set | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | exceptional return of res.set ... plain') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | exceptional return of res.set ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | exceptional return of res.set ... plain') | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | exceptional return of res.set ... plain') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | exceptional return of res.set ... plain') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | res.set ... plain') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | res.set ... plain') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | res.set ... plain') | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | res.set ... plain') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:5:6:41 | res.set ... plain') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:9:6:11 | set | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:9:6:11 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:9:6:11 | set | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:9:6:11 | set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:9:6:11 | set | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:13:6:26 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:6:29:6:40 | 'text/plain' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:7 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:12 | res.send | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | res.sen ... ams.id) | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:5:7:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:9:7:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:9:7:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:9:7:12 | send | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:9:7:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:9:7:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:14:7:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:26 | req | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:33 | req.params | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:24:7:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:28:7:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:28:7:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:28:7:33 | params | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:28:7:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:28:7:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:35:7:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:35:7:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:35:7:36 | id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:35:7:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:7:35:7:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:7 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:11 | res.set | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:11 | res.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:11 | res.set | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:11 | res.set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:11 | res.set | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | exceptional return of res.set ... /html') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | exceptional return of res.set ... /html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | exceptional return of res.set ... /html') | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | exceptional return of res.set ... /html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | exceptional return of res.set ... /html') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | res.set ... /html') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | res.set ... /html') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | res.set ... /html') | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | res.set ... /html') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:5:9:40 | res.set ... /html') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:9:9:11 | set | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:9:9:11 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:9:9:11 | set | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:9:9:11 | set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:9:9:11 | set | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:13:9:26 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:9:29:9:39 | 'text/html' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:7 | res | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:12 | res.send | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | res.sen ... ams.id) | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:5:10:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:9:10:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:9:10:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:9:10:12 | send | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:9:10:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:9:10:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:14:10:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:26 | req | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:33 | req.params | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:24:10:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:28:10:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:28:10:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:28:10:33 | params | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:28:10:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:28:10:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:35:10:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:35:10:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:35:10:36 | id | enclosingFunctionBody | req res whatever res set Content-Type text/plain res send FOO:  req params id res set Content-Type text/html res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:35:10:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:10:35:10:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:14:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:1:22:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:5:14:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:5:14:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:5:14:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:9:14:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:14:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:14:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:14:21 | this | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:14:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:14:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | exceptional return of anonymous function | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | functio ... .\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | return of anonymous function | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:22:22:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:32:14:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:14:37:14:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:15:7:15:14 | whatever | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:15:7:15:14 | whatever | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:15:7:15:14 | whatever | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:15:7:15:14 | whatever | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:15:7:15:14 | whatever | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:7 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:17 | res.writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:17 | res.writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:17 | res.writeHead | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:17 | res.writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:17 | res.writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | exceptional return of res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | exceptional return of res.wri ... json'}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | exceptional return of res.wri ... json'}) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | exceptional return of res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | exceptional return of res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | res.wri ... json'}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | res.wri ... json'}) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:5:16:60 | res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:9:16:17 | writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:9:16:17 | writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:9:16:17 | writeHead | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:9:16:17 | writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:9:16:17 | writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:19:16:21 | 200 | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:24:16:59 | {'Conte ... /json'} | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:38 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:38 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:38 | 'Content-Type' | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:38 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:38 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:25:16:58 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | InputAccessPathFromCallee | 1.Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | assignedToPropName | Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:16:41:16:58 | 'application/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:7 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:12 | res.send | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | res.sen ... ams.id) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:5:17:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:9:17:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:9:17:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:9:17:12 | send | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:9:17:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:9:17:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:14:17:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:26 | req | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:33 | req.params | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:24:17:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:28:17:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:28:17:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:28:17:33 | params | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:28:17:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:28:17:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:35:17:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:35:17:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:35:17:36 | id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:35:17:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:17:35:17:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:7 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:17 | res.writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:17 | res.writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:17 | res.writeHead | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:17 | res.writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:17 | res.writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | exceptional return of res.writeHead(404) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | exceptional return of res.writeHead(404) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | exceptional return of res.writeHead(404) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | exceptional return of res.writeHead(404) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | exceptional return of res.writeHead(404) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | res.writeHead(404) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | res.writeHead(404) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | res.writeHead(404) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | res.writeHead(404) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:5:19:22 | res.writeHead(404) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:9:19:17 | writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:9:19:17 | writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:9:19:17 | writeHead | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:9:19:17 | writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:9:19:17 | writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:19:19:19:21 | 404 | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:7 | res | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:12 | res.send | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | res.sen ... ams.id) | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:5:20:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:9:20:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:9:20:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:9:20:12 | send | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:9:20:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:9:20:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:14:20:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:26 | req | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:33 | req.params | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:24:20:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:28:20:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:28:20:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:28:20:33 | params | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:28:20:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:28:20:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:35:20:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:35:20:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:35:20:36 | id | enclosingFunctionBody | req res whatever res writeHead 200 Content-Type application/json res send FOO:  req params id res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:35:20:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:20:35:20:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:25:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | app.get ... JSON\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | app.get ... JSON\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | app.get ... JSON\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | exceptional return of app.get ... JSON\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | exceptional return of app.get ... JSON\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:1:33:2 | exceptional return of app.get ... JSON\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:5:25:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:5:25:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:5:25:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:9:25:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:25:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:25:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:25:21 | this | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:25:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:25:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | functio ...  JSON\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | return of anonymous function | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:22:33:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:32:25:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:25:37:25:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:5 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:15 | res.writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:15 | res.writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:15 | res.writeHead | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:15 | res.writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:15 | res.writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | exceptional return of res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | exceptional return of res.wri ... json'}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | exceptional return of res.wri ... json'}) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | exceptional return of res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | exceptional return of res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | res.wri ... json'}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | res.wri ... json'}) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:3:26:58 | res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:7:26:15 | writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:7:26:15 | writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:7:26:15 | writeHead | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:7:26:15 | writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:7:26:15 | writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:17:26:19 | 200 | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:22:26:57 | {'Conte ... /json'} | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:36 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:36 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:36 | 'Content-Type' | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:36 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:36 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:23:26:56 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | InputAccessPathFromCallee | 1.Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | assignedToPropName | Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:26:39:26:56 | 'application/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:27:7:27:14 | whatever | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:27:7:27:14 | whatever | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:27:7:27:14 | whatever | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:27:7:27:14 | whatever | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:27:7:27:14 | whatever | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:7 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:12 | res.send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:5:28:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:9:28:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:9:28:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:9:28:12 | send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:9:28:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:9:28:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:14:28:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:26 | req | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:33 | req.params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:24:28:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:28:28:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:28:28:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:28:28:33 | params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:28:28:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:28:28:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:35:28:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:35:28:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:35:28:36 | id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:35:28:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:28:35:28:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:7 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:12 | res.send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:5:30:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:9:30:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:9:30:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:9:30:12 | send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:9:30:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:9:30:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:14:30:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:26 | req | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:33 | req.params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:24:30:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:28:30:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:28:30:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:28:30:33 | params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:28:30:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:28:30:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:35:30:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:35:30:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:35:30:36 | id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:35:30:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:30:35:30:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:5 | res | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:10 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:10 | res.send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | res.sen ... ams.id) | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:3:32:35 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:7:32:10 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:7:32:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:7:32:10 | send | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:7:32:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:7:32:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:18 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:12:32:34 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:24 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:24 | req | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:24 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:31 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:31 | req.params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:31 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:22:32:34 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:26:32:31 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:26:32:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:26:32:31 | params | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:26:32:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:26:32:31 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:33:32:34 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:33:32:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:33:32:34 | id | enclosingFunctionBody | req res res writeHead 200 Content-Type application/json whatever res send FOO:  req params id res send FOO:  req params id res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:33:32:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:32:33:32:34 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:36:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:1:44:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:5:36:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:5:36:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:5:36:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:9:36:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:36:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:36:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:36:21 | this | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:36:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:36:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | exceptional return of anonymous function | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | functio ... K\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | return of anonymous function | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:22:44:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:32:36:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:36:37:36:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:37:7:37:9 | err | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:37:7:37:9 | err | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:37:7:37:9 | err | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:37:7:37:9 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:37:7:37:9 | err | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:7 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:18 | res.statusCode | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:18 | res.statusCode | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:18 | res.statusCode | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:18 | res.statusCode | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:18 | res.statusCode | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:24 | res.statusCode = 404 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:24 | res.statusCode = 404 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:24 | res.statusCode = 404 | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:24 | res.statusCode = 404 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:5:38:24 | res.statusCode = 404 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:9:38:18 | statusCode | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:9:38:18 | statusCode | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:9:38:18 | statusCode | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:9:38:18 | statusCode | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:9:38:18 | statusCode | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | assignedToPropName | statusCode |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:38:22:38:24 | 404 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:7 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:11 | res.end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:11 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:11 | res.end | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:11 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:11 | res.end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | exceptional return of res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | exceptional return of res.end ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | exceptional return of res.end ... ams.id) | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | exceptional return of res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | exceptional return of res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | res.end ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | res.end ... ams.id) | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:5:39:36 | res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:9:39:11 | end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:9:39:11 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:9:39:11 | end | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:9:39:11 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:9:39:11 | end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:19 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:25 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:25 | req | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:25 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:32 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:32 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:32 | req.params | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:32 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:32 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:27:39:32 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:27:39:32 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:27:39:32 | params | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:27:39:32 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:27:39:32 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:34:39:35 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:34:39:35 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:34:39:35 | id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:34:39:35 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:39:34:39:35 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:7 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:17 | res.setHeader | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:17 | res.setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:17 | res.setHeader | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:17 | res.setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:17 | res.setHeader | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | exceptional return of res.set ... =utf8') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | exceptional return of res.set ... =utf8') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | exceptional return of res.set ... =utf8') | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | exceptional return of res.set ... =utf8') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | exceptional return of res.set ... =utf8') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | res.set ... =utf8') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | res.set ... =utf8') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | res.set ... =utf8') | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | res.set ... =utf8') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:5:41:60 | res.set ... =utf8') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:9:41:17 | setHeader | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:9:41:17 | setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:9:41:17 | setHeader | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:9:41:17 | setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:9:41:17 | setHeader | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:19:41:32 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:41:35:41:59 | 'text/p ... t=utf8' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:7 | res | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:11 | res.end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:11 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:11 | res.end | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:11 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:11 | res.end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | exceptional return of res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | exceptional return of res.end ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | exceptional return of res.end ... ams.id) | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | exceptional return of res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | exceptional return of res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | res.end ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | res.end ... ams.id) | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:5:42:36 | res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:9:42:11 | end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:9:42:11 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:9:42:11 | end | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:9:42:11 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:9:42:11 | end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:19 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:13:42:35 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:25 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:25 | req | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:25 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:32 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:32 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:32 | req.params | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:32 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:32 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:23:42:35 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:27:42:32 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:27:42:32 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:27:42:32 | params | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:27:42:32 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:27:42:32 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:34:42:35 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:34:42:35 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:34:42:35 | id | enclosingFunctionBody | req res err res statusCode 404 res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:34:42:35 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:42:34:42:35 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:46:0 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:46:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:46:0 | this | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:46:0 | this | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:46:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | 'arguments' object of function textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | 'arguments' object of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | 'arguments' object of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | 'arguments' object of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | 'arguments' object of function textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | exceptional return of function textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | exceptional return of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | exceptional return of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | exceptional return of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | exceptional return of function textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | functio ... ain";\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | functio ... ain";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | functio ... ain";\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | return of function textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | return of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | return of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | return of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:1:48:1 | return of function textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:46:10:46:24 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:8 | result | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:8 | result | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:8 | result | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:8 | result | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:8 | result | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:23 | result  ... /plain" | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:23 | result  ... /plain" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:23 | result  ... /plain" | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:23 | result  ... /plain" | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:3:47:23 | result  ... /plain" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:12:47:23 | "text/plain" | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:12:47:23 | "text/plain" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:12:47:23 | "text/plain" | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:12:47:23 | "text/plain" | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:47:12:47:23 | "text/plain" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:50:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:5:50:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:5:50:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:5:50:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:9:50:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | textContentType | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | this | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:50:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | exceptional return of anonymous function | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | functio ... K\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | return of anonymous function | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:22:58:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:32:50:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:50:37:50:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:51:7:51:9 | err | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:51:7:51:9 | err | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:51:7:51:9 | err | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:51:7:51:9 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:51:7:51:9 | err | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:7 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:14 | res.header | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:14 | res.header | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:14 | res.header | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:14 | res.header | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:14 | res.header | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | exceptional return of res.hea ... ype()}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | exceptional return of res.hea ... ype()}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | exceptional return of res.hea ... ype()}) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | exceptional return of res.hea ... ype()}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | exceptional return of res.hea ... ype()}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | res.hea ... ype()}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | res.hea ... ype()}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | res.hea ... ype()}) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | res.hea ... ype()}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:5:52:51 | res.hea ... ype()}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:9:52:14 | header | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:9:52:14 | header | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:9:52:14 | header | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:9:52:14 | header | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:9:52:14 | header | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | CalleeFlexibleAccessPath | res.header |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:16:52:50 | {'Conte ... Type()} | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:30 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:30 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:30 | 'Content-Type' | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:30 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:30 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:17:52:49 | 'Conten ... tType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:47 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:47 | textContentType | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:47 | textContentType | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:47 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:47 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | exceptional return of textContentType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | exceptional return of textContentType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | exceptional return of textContentType() | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | exceptional return of textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | exceptional return of textContentType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | CalleeFlexibleAccessPath | res.header |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | InputAccessPathFromCallee | 0.Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | assignedToPropName | Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:52:33:52:49 | textContentType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:7 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:11 | res.end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:11 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:11 | res.end | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:11 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:11 | res.end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | exceptional return of res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | exceptional return of res.end ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | exceptional return of res.end ... ams.id) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | exceptional return of res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | exceptional return of res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | res.end ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | res.end ... ams.id) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:5:53:36 | res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:9:53:11 | end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:9:53:11 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:9:53:11 | end | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:9:53:11 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:9:53:11 | end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:19 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:13:53:35 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:25 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:25 | req | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:25 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:32 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:32 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:32 | req.params | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:32 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:32 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:23:53:35 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:27:53:32 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:27:53:32 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:27:53:32 | params | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:27:53:32 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:27:53:32 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:34:53:35 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:34:53:35 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:34:53:35 | id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:34:53:35 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:53:34:53:35 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:7 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:17 | res.setHeader | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:17 | res.setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:17 | res.setHeader | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:17 | res.setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:17 | res.setHeader | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | exceptional return of res.set ... =utf8') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | exceptional return of res.set ... =utf8') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | exceptional return of res.set ... =utf8') | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | exceptional return of res.set ... =utf8') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | exceptional return of res.set ... =utf8') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | res.set ... =utf8') | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | res.set ... =utf8') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | res.set ... =utf8') | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | res.set ... =utf8') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:5:55:60 | res.set ... =utf8') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:9:55:17 | setHeader | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:9:55:17 | setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:9:55:17 | setHeader | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:9:55:17 | setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:9:55:17 | setHeader | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:19:55:32 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:55:35:55:59 | 'text/p ... t=utf8' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:7 | res | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:11 | res.end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:11 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:11 | res.end | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:11 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:11 | res.end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | exceptional return of res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | exceptional return of res.end ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | exceptional return of res.end ... ams.id) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | exceptional return of res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | exceptional return of res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | res.end ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | res.end ... ams.id) | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:5:56:36 | res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:9:56:11 | end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:9:56:11 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:9:56:11 | end | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:9:56:11 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:9:56:11 | end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:19 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:13:56:35 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:25 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:25 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:25 | req | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:25 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:25 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:32 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:32 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:32 | req.params | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:32 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:32 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:23:56:35 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:27:56:32 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:27:56:32 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:27:56:32 | params | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:27:56:32 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:27:56:32 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:34:56:35 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:34:56:35 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:34:56:35 | id | enclosingFunctionBody | req res err res header Content-Type textContentType res end FOO:  req params id res setHeader Content-Type text/plain;charset=utf8 res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:34:56:35 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:56:34:56:35 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:60:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | app.get ... set.\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | app.get ... set.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | app.get ... set.\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | exceptional return of app.get ... set.\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | exceptional return of app.get ... set.\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:1:71:2 | exceptional return of app.get ... set.\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:5:60:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:5:60:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:5:60:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:9:60:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:60:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:60:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:60:21 | this | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:60:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:60:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | exceptional return of anonymous function | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | functio ...  set.\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | return of anonymous function | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:22:71:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:32:60:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:60:37:60:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:61:7:61:9 | err | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:61:7:61:9 | err | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:61:7:61:9 | err | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:61:7:61:9 | err | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:61:7:61:9 | err | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:7 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:17 | res.writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:17 | res.writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:17 | res.writeHead | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:17 | res.writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:17 | res.writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | exceptional return of res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | exceptional return of res.wri ... json'}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | exceptional return of res.wri ... json'}) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | exceptional return of res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | exceptional return of res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | res.wri ... json'}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | res.wri ... json'}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | res.wri ... json'}) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | res.wri ... json'}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:5:62:60 | res.wri ... json'}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:9:62:17 | writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:9:62:17 | writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:9:62:17 | writeHead | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:9:62:17 | writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:9:62:17 | writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:19:62:21 | 200 | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:24:62:59 | {'Conte ... /json'} | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:38 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:38 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:38 | 'Content-Type' | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:38 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:38 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:25:62:58 | 'Conten ... n/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | InputAccessPathFromCallee | 1.Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | assignedToPropName | Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:62:41:62:58 | 'application/json' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:7 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:7 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:7 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:12 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:12 | res.send | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:12 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | res.sen ... ams.id) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:5:63:37 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:9:63:12 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:9:63:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:9:63:12 | send | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:9:63:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:9:63:12 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:20 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:14:63:36 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:26 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:26 | req | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:33 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:33 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:33 | req.params | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:33 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:33 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:24:63:36 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:28:63:33 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:28:63:33 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:28:63:33 | params | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:28:63:33 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:28:63:33 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:35:63:36 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:35:63:36 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:35:63:36 | id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:35:63:36 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:63:35:63:36 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:13 | doSomething | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:13 | doSomething | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:13 | doSomething | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:13 | doSomething | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:13 | doSomething | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | doSomething() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | doSomething() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | doSomething() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | doSomething() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | doSomething() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | exceptional return of doSomething() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | exceptional return of doSomething() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | exceptional return of doSomething() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | exceptional return of doSomething() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:66:3:66:15 | exceptional return of doSomething() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:15 | somethingMore | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:15 | somethingMore | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:15 | somethingMore | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:15 | somethingMore | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:15 | somethingMore | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | exceptional return of somethingMore() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | exceptional return of somethingMore() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | exceptional return of somethingMore() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | exceptional return of somethingMore() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | exceptional return of somethingMore() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | somethingMore() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | somethingMore() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | somethingMore() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | somethingMore() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:67:3:67:17 | somethingMore() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:12 | Math | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:12 | Math | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:12 | Math | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:12 | Math | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:12 | Math | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:19 | Math.random | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:19 | Math.random | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:19 | Math.random | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:19 | Math.random | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:19 | Math.random | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | Math.random() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | Math.random() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | Math.random() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | Math.random() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | Math.random() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | exceptional return of Math.random() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | exceptional return of Math.random() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | exceptional return of Math.random() | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | exceptional return of Math.random() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:9:68:21 | exceptional return of Math.random() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:14:68:19 | random | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:14:68:19 | random | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:14:68:19 | random | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:14:68:19 | random | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:68:14:68:19 | random | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:5 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:15 | res.writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:15 | res.writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:15 | res.writeHead | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:15 | res.writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:15 | res.writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | exceptional return of res.writeHead(404) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | exceptional return of res.writeHead(404) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | exceptional return of res.writeHead(404) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | exceptional return of res.writeHead(404) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | exceptional return of res.writeHead(404) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | res.writeHead(404) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | res.writeHead(404) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | res.writeHead(404) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | res.writeHead(404) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:3:69:20 | res.writeHead(404) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:7:69:15 | writeHead | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:7:69:15 | writeHead | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:7:69:15 | writeHead | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:7:69:15 | writeHead | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:7:69:15 | writeHead | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | CalleeFlexibleAccessPath | res.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:69:17:69:19 | 404 | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:5 | res | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:10 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:10 | res.send | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | res.sen ... ams.id) | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:3:70:35 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:7:70:10 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:7:70:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:7:70:10 | send | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:7:70:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:7:70:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:18 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:24 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:24 | req | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:24 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:31 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:31 | req.params | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:31 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:26:70:31 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:26:70:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:26:70:31 | params | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:26:70:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:26:70:31 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:33:70:34 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:33:70:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:33:70:34 | id | enclosingFunctionBody | req res err res writeHead 200 Content-Type application/json res send FOO:  req params id doSomething somethingMore Math random res writeHead 404 res send FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:33:70:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:70:33:70:34 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:3 | app | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:7 | app.get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:73:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:1:79:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:5:73:7 | get | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:5:73:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:5:73:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:9:73:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | textContentType | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | this | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | this | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:73:22 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | functio ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | return of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:22:79:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:32:73:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:73:37:73:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:5 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:12 | res.header | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:12 | res.header | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:12 | res.header | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:12 | res.header | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:12 | res.header | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | exceptional return of res.hea ... ype()}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | exceptional return of res.hea ... ype()}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | exceptional return of res.hea ... ype()}) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | exceptional return of res.hea ... ype()}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | exceptional return of res.hea ... ype()}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | res.hea ... ype()}) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | res.hea ... ype()}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | res.hea ... ype()}) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | res.hea ... ype()}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:3:74:49 | res.hea ... ype()}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:7:74:12 | header | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:7:74:12 | header | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:7:74:12 | header | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:7:74:12 | header | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:7:74:12 | header | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | CalleeFlexibleAccessPath | res.header |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:14:74:48 | {'Conte ... Type()} | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:28 | 'Content-Type' | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:28 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:28 | 'Content-Type' | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:28 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:28 | 'Content-Type' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:15:74:47 | 'Conten ... tType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:45 | textContentType | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:45 | textContentType | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:45 | textContentType | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:45 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:45 | textContentType | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | exceptional return of textContentType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | exceptional return of textContentType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | exceptional return of textContentType() | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | exceptional return of textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | exceptional return of textContentType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | CalleeFlexibleAccessPath | res.header |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | InputAccessPathFromCallee | 0.Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | assignedToPropName | Content-Type |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:74:31:74:47 | textContentType() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:75:17 | myFancyFunction | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:75:17 | myFancyFunction | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:75:17 | myFancyFunction | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:75:17 | myFancyFunction | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:75:17 | myFancyFunction | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | exceptional return of myFancy ... OK\\n  }) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | exceptional return of myFancy ... OK\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | exceptional return of myFancy ... OK\\n  }) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | exceptional return of myFancy ... OK\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | exceptional return of myFancy ... OK\\n  }) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | myFancy ... OK\\n  }) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | myFancy ... OK\\n  }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | myFancy ... OK\\n  }) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | myFancy ... OK\\n  }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:3:77:4 | myFancy ... OK\\n  }) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:75:18 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | CalleeFlexibleAccessPath | myFancyFunction |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | () => { ...  OK\\n  } | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | exceptional return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | exceptional return of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | return of anonymous function | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | return of anonymous function | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:75:19:77:3 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:4 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:4 | res | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:4 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:4 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:4 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:9 | res.send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:9 | res.send | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:9 | res.send | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:9 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:9 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | exceptional return of res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | res.sen ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | res.sen ... ams.id) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:2:76:34 | res.sen ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:6:76:9 | send | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:6:76:9 | send | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:6:76:9 | send | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:6:76:9 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:6:76:9 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:17 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:11:76:33 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:23 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:23 | req | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:23 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:23 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:30 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:30 | req.params | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:30 | req.params | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:30 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:30 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:21:76:33 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:25:76:30 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:25:76:30 | params | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:25:76:30 | params | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:25:76:30 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:25:76:30 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:32:76:33 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:32:76:33 | id | contextSurroundingFunctionParameters | (req, res)\n() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:32:76:33 | id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:32:76:33 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:76:32:76:33 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:5 | res | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:5 | res | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:9 | res.end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:9 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:9 | res.end | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:9 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:9 | res.end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | exceptional return of res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | exceptional return of res.end ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | exceptional return of res.end ... ams.id) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | exceptional return of res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | exceptional return of res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | res.end ... ams.id) | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | res.end ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | res.end ... ams.id) | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | res.end ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:3:78:34 | res.end ... ams.id) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:7:78:9 | end | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:7:78:9 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:7:78:9 | end | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:7:78:9 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:7:78:9 | end | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:17 | "FOO: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:11:78:33 | "FOO: " ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:23 | req | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:23 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:23 | req | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:23 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:30 | req.params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:30 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:30 | req.params | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:30 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:30 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:21:78:33 | req.params.id | stringConcatenatedWith | 'FOO: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:25:78:30 | params | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:25:78:30 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:25:78:30 | params | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:25:78:30 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:25:78:30 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:32:78:33 | id | contextFunctionInterfaces | textContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:32:78:33 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:32:78:33 | id | enclosingFunctionBody | req res res header Content-Type textContentType myFancyFunction res send FOO:  req params id res end FOO:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:32:78:33 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssContentTypes.js:78:32:78:33 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:0 | this | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:0 | this | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | require | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | require | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:1:1:1 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:9 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:9 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:9 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:9 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url = require("url") | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url = require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:7:1:26 | url = require("url") | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:19 | require | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:19 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:19 | require | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | exceptional return of require("url") | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | exceptional return of require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | exceptional return of require("url") | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | require("url") | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | require("url") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:13:1:26 | require("url") | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:1:21:1:25 | "url" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:7 | require | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:7 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:7 | require | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | exceptional return of require("http") | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | exceptional return of require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | exceptional return of require("http") | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | require("http") | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | require("http") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:15 | require("http") | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:28 | require ... eServer | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:28 | require ... eServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:3:28 | require ... eServer | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | exceptional return of require ... ame)\\n}) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | exceptional return of require ... ame)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | exceptional return of require ... ame)\\n}) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | require ... ame)\\n}) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | require ... ame)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:1:6:2 | require ... ame)\\n}) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:9:3:14 | "http" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:17:3:28 | createServer | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:17:3:28 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:17:3:28 | createServer | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | sendTextResponse | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | sendTextResponse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | this | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | this | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | this | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | this | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | url | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:3:29 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | 'arguments' object of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | 'arguments' object of anonymous function | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | exceptional return of anonymous function | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | exceptional return of anonymous function | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | exceptional return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | exceptional return of anonymous function | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | CalleeFlexibleAccessPath | import(!).createServer |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | calleeImports | http |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | functio ... name)\\n} | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | return of anonymous function | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | return of anonymous function | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | return of anonymous function | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:30:6:1 | return of anonymous function | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:39:3:41 | req | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:3:44:3:47 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:12 | target | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:12 | target | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:12 | target | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:12 | target | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:12 | target | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target  ... , true) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target  ... , true) | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target  ... , true) | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target  ... , true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:7:4:39 | target  ... , true) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:18 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:18 | url | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:18 | url | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:18 | url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:18 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:24 | url.parse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:24 | url.parse | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:24 | url.parse | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:24 | url.parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:24 | url.parse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | exceptional return of url.par ... , true) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | exceptional return of url.par ... , true) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | exceptional return of url.par ... , true) | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | exceptional return of url.par ... , true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | exceptional return of url.par ... , true) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | url.par ... , true) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | url.par ... , true) | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | url.par ... , true) | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | url.par ... , true) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:16:4:39 | url.par ... , true) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:20:4:24 | parse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:20:4:24 | parse | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:20:4:24 | parse | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:20:4:24 | parse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:20:4:24 | parse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:28 | req | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:28 | req | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:28 | req | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:28 | req | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:28 | req | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | CalleeFlexibleAccessPath | url.parse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | calleeImports | url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:26:4:32 | req.url | receiverName | url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:30:4:32 | url | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:30:4:32 | url | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:30:4:32 | url | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:30:4:32 | url | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:30:4:32 | url | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | CalleeFlexibleAccessPath | url.parse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | calleeImports | url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:4:35:4:38 | true | receiverName | url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:18 | sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:18 | sendTextResponse | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:18 | sendTextResponse | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:18 | sendTextResponse | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:18 | sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | exceptional return of sendTex ... thname) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | exceptional return of sendTex ... thname) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | exceptional return of sendTex ... thname) | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | exceptional return of sendTex ... thname) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | exceptional return of sendTex ... thname) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | sendTex ... thname) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | sendTex ... thname) | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | sendTex ... thname) | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | sendTex ... thname) | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:3:5:41 | sendTex ... thname) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | CalleeFlexibleAccessPath | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:20:5:23 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:31 | target | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:31 | target | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:31 | target | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:31 | target | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:31 | target | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | CalleeFlexibleAccessPath | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:26:5:40 | target.pathname | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:33:5:40 | pathname | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:33:5:40 | pathname | contextSurroundingFunctionParameters | (req, resp) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:33:5:40 | pathname | enclosingFunctionBody | req resp target url parse req url true sendTextResponse resp target pathname |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:33:5:40 | pathname | enclosingFunctionName | createServer#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:5:33:5:40 | pathname | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:8:0 | this | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:8:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:8:0 | this | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:8:0 | this | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:8:0 | this | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | 'arguments' object of function sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | 'arguments' object of function sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | 'arguments' object of function sendTextResponse | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | 'arguments' object of function sendTextResponse | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | 'arguments' object of function sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | exceptional return of function sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | exceptional return of function sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | exceptional return of function sendTextResponse | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | exceptional return of function sendTextResponse | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | exceptional return of function sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | functio ... ext);\\n} | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | functio ... ext);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | functio ... ext);\\n} | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | return of function sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | return of function sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | return of function sendTextResponse | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | return of function sendTextResponse | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:1:11:1 | return of function sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:10:8:25 | sendTextResponse | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:27:8:30 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:8:33:8:36 | text | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:6 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:6 | resp | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:6 | resp | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:6 | resp | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:6 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:16 | resp.writeHead | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:16 | resp.writeHead | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:16 | resp.writeHead | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:16 | resp.writeHead | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:16 | resp.writeHead | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | exceptional return of resp.wr ... tf-8"}) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | exceptional return of resp.wr ... tf-8"}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | exceptional return of resp.wr ... tf-8"}) | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | exceptional return of resp.wr ... tf-8"}) | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | exceptional return of resp.wr ... tf-8"}) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | resp.wr ... tf-8"}) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | resp.wr ... tf-8"}) | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | resp.wr ... tf-8"}) | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | resp.wr ... tf-8"}) | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:3:9:68 | resp.wr ... tf-8"}) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:8:9:16 | writeHead | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:8:9:16 | writeHead | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:8:9:16 | writeHead | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:8:9:16 | writeHead | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:8:9:16 | writeHead | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | CalleeFlexibleAccessPath | resp.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:18:9:20 | 200 | receiverName | resp |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | CalleeFlexibleAccessPath | resp.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:23:9:67 | {"conte ... utf-8"} | receiverName | resp |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:37 | "content-type" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:37 | "content-type" | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:37 | "content-type" | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:37 | "content-type" | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:37 | "content-type" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:24:9:66 | "conten ... =utf-8" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | CalleeFlexibleAccessPath | resp.writeHead |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | InputAccessPathFromCallee | 1.content-type |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | assignedToPropName | content-type |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:9:40:9:66 | "text/p ... =utf-8" | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:6 | resp | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:6 | resp | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:6 | resp | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:6 | resp | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:6 | resp | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:10 | resp.end | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:10 | resp.end | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:10 | resp.end | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:10 | resp.end | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:10 | resp.end | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | exceptional return of resp.end(text) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | exceptional return of resp.end(text) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | exceptional return of resp.end(text) | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | exceptional return of resp.end(text) | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | exceptional return of resp.end(text) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | resp.end(text) | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | resp.end(text) | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | resp.end(text) | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | resp.end(text) | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:3:10:16 | resp.end(text) | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:8:10:10 | end | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:8:10:10 | end | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:8:10:10 | end | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:8:10:10 | end | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:8:10:10 | end | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | CalleeFlexibleAccessPath | resp.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | contextFunctionInterfaces | sendTextResponse(resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | contextSurroundingFunctionParameters | (resp, text) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | enclosingFunctionBody | resp text resp writeHead 200 content-type text/plain; charset=utf-8 resp end text |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | enclosingFunctionName | sendTextResponse |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | fileImports | http url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood2.js:10:12:10:15 | text | receiverName | resp |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:0 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | require | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:1:1:1 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:11 | express | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:11 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:5:1:32 | express ... press') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:21 | require | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:21 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | exceptional return of require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | require('express') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:15:1:32 | require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:1:23:1:31 | 'express' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:7 | app | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:7 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app = express() | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:5:3:19 | app = express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:17 | express | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:17 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | exceptional return of express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | express() | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:3:11:3:19 | express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:5:0 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:5:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:5:0 | this | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:5:0 | this | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:5:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | 'arguments' object of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | 'arguments' object of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | 'arguments' object of function escapeHtml1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | 'arguments' object of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | 'arguments' object of function escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | exceptional return of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | exceptional return of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | exceptional return of function escapeHtml1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | exceptional return of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | exceptional return of function escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | functio ... html;\\n} | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | functio ... html;\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | return of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | return of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | return of function escapeHtml1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | return of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:1:43:1 | return of function escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:10:5:20 | escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:5:22:5:27 | string | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:9 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:9 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:9 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:9 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:9 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str = "" + string | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str = "" + string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str = "" + string | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str = "" + string | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:7:6:23 | str = "" + string | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:14 | "" | stringConcatenatedWith |  -endpoint- string |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:23 | "" + string | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:23 | "" + string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:23 | "" + string | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:23 | "" + string | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:13:6:23 | "" + string | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:6:18:6:23 | string | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:7:7:7:12 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:10 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:10 | html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:10 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:10 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:10 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html = '' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html = '' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html = '' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html = '' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:7:8:15 | html = '' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:14:8:15 | '' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:14:8:15 | '' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:14:8:15 | '' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:14:8:15 | '' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:8:14:8:15 | '' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:15 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:15 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:15 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:15 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:15 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex = 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex = 0 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex = 0 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex = 0 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:7:9:19 | lastIndex = 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:19:9:19 | 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:19:9:19 | 0 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:19:9:19 | 0 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:19:9:19 | 0 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:9:19:9:19 | 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:16 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:16 | index | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:16 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:16 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:16 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index = 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index = 0 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index = 0 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index = 0 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:12:11:20 | index = 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:20:11:20 | 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:20:11:20 | 0 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:20:11:20 | 0 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:20:11:20 | 0 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:20:11:20 | 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | index | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | lastIndex | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:23 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:40 | index < str.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:40 | index < str.length | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:40 | index < str.length | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:40 | index < str.length | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:23:11:40 | index < str.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:33 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:33 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:33 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:33 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:33 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:40 | str.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:40 | str.length | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:40 | str.length | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:40 | str.length | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:31:11:40 | str.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:35:11:40 | length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:35:11:40 | length | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:35:11:40 | length | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:35:11:40 | length | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:35:11:40 | length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | lastIndex | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:43 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index++ | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index++ | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index++ | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index++ | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:11:43:11:49 | index++ | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:15 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:15 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:15 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:15 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:15 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:26 | str.charCodeAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:26 | str.charCodeAt | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:26 | str.charCodeAt | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:26 | str.charCodeAt | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:26 | str.charCodeAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | exceptional return of str.cha ... (index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | exceptional return of str.cha ... (index) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | exceptional return of str.cha ... (index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | exceptional return of str.cha ... (index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | exceptional return of str.cha ... (index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | str.cha ... (index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | str.cha ... (index) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | str.cha ... (index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | str.cha ... (index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:13:12:33 | str.cha ... (index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:17:12:26 | charCodeAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:17:12:26 | charCodeAt | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:17:12:26 | charCodeAt | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:17:12:26 | charCodeAt | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:12:17:12:26 | charCodeAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:13:12:13:13 | 34 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:13:12:13:13 | 34 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:13:12:13:13 | 34 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:13:12:13:13 | 34 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:13:12:13:13 | 34 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:14 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:14 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:14 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:14 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:14 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape = '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape = '&quot;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape = '&quot;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape = '&quot;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:9:14:25 | escape = '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:18:14:25 | '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:18:14:25 | '&quot;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:18:14:25 | '&quot;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:18:14:25 | '&quot;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:14:18:14:25 | '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:16:12:16:13 | 38 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:16:12:16:13 | 38 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:16:12:16:13 | 38 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:16:12:16:13 | 38 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:16:12:16:13 | 38 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:14 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:14 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:14 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:14 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:14 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape = '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape = '&amp;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape = '&amp;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape = '&amp;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:9:17:24 | escape = '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:18:17:24 | '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:18:17:24 | '&amp;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:18:17:24 | '&amp;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:18:17:24 | '&amp;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:17:18:17:24 | '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:19:12:19:13 | 39 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:19:12:19:13 | 39 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:19:12:19:13 | 39 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:19:12:19:13 | 39 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:19:12:19:13 | 39 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:14 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:14 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:14 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:14 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:14 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape = '&#39;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape = '&#39;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape = '&#39;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape = '&#39;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:9:20:24 | escape = '&#39;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:18:20:24 | '&#39;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:18:20:24 | '&#39;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:18:20:24 | '&#39;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:18:20:24 | '&#39;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:20:18:20:24 | '&#39;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:22:12:22:13 | 60 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:22:12:22:13 | 60 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:22:12:22:13 | 60 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:22:12:22:13 | 60 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:22:12:22:13 | 60 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:14 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:14 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:14 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:14 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:14 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape = '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape = '&lt;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape = '&lt;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape = '&lt;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:9:23:23 | escape = '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:18:23:23 | '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:18:23:23 | '&lt;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:18:23:23 | '&lt;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:18:23:23 | '&lt;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:23:18:23:23 | '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:25:12:25:13 | 62 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:25:12:25:13 | 62 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:25:12:25:13 | 62 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:25:12:25:13 | 62 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:25:12:25:13 | 62 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:14 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:14 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:14 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:14 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:14 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape = '&gt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape = '&gt;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape = '&gt;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape = '&gt;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:9:26:23 | escape = '&gt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:18:26:23 | '&gt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:18:26:23 | '&gt;' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:18:26:23 | '&gt;' | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:18:26:23 | '&gt;' | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:26:18:26:23 | '&gt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:5:32:5 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:5:32:5 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:5:32:5 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:5:32:5 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:5:32:5 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:17 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:17 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:17 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:17 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:17 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:27 | lastIndex !== index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:27 | lastIndex !== index | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:27 | lastIndex !== index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:27 | lastIndex !== index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:32:9:32:27 | lastIndex !== index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:10 | html | stringConcatenatedWith |  -endpoint- str.substring() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html += ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html += ...  index) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html += ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html += ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:7:33:45 | html += ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:17 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:17 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:17 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:17 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:17 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:27 | str.substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:27 | str.substring | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:27 | str.substring | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:27 | str.substring | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:27 | str.substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | exceptional return of str.sub ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | exceptional return of str.sub ...  index) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | exceptional return of str.sub ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | exceptional return of str.sub ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | exceptional return of str.sub ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:15:33:45 | str.sub ...  index) | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:19:33:27 | substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:19:33:27 | substring | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:19:33:27 | substring | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:19:33:27 | substring | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:19:33:27 | substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | CalleeFlexibleAccessPath | str.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:29:33:37 | lastIndex | receiverName | str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | CalleeFlexibleAccessPath | str.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:33:40:33:44 | index | receiverName | str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:5 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:5 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:5 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:5 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:5 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:13 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:13 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:13 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:13 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:13 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastInd ... dex + 1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastInd ... dex + 1 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastInd ... dex + 1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastInd ... dex + 1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastInd ... dex + 1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastIndex | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:5:36:25 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:17:36:25 | index + 1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:17:36:25 | index + 1 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:17:36:25 | index + 1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:17:36:25 | index + 1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:17:36:25 | index + 1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:36:25:36:25 | 1 | stringConcatenatedWith | index -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:8 | html | stringConcatenatedWith |  -endpoint- escape |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html += escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html += escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html += escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html += escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:5:37:18 | html += escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:37:13:37:18 | escape | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:18 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:18 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:18 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:18 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:18 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:28 | lastIndex !== index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:28 | lastIndex !== index | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:28 | lastIndex !== index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:28 | lastIndex !== index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:40:28 | lastIndex !== index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:42:10 | lastInd ...  : html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:42:10 | lastInd ...  : html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:42:10 | lastInd ...  : html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:42:10 | lastInd ...  : html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:40:10:42:10 | lastInd ...  : html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:10 | html | stringConcatenatedWith |  -endpoint- str.substring() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:44 | html +  ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:44 | html +  ...  index) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:44 | html +  ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:44 | html +  ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:7:41:44 | html +  ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:16 | str | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:16 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:16 | str | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:16 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:16 | str | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:26 | str.substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:26 | str.substring | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:26 | str.substring | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:26 | str.substring | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:26 | str.substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | exceptional return of str.sub ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | exceptional return of str.sub ...  index) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | exceptional return of str.sub ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | exceptional return of str.sub ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | exceptional return of str.sub ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:14:41:44 | str.sub ...  index) | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:18:41:26 | substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:18:41:26 | substring | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:18:41:26 | substring | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:18:41:26 | substring | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:18:41:26 | substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | CalleeFlexibleAccessPath | str.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:28:41:36 | lastIndex | receiverName | str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | CalleeFlexibleAccessPath | str.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:41:39:41:43 | index | receiverName | str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:42:7:42:10 | html | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:42:7:42:10 | html | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:42:7:42:10 | html | enclosingFunctionBody | string str  string escape html  lastIndex 0 index 0 index str length index str charCodeAt index 34 escape &quot; 38 escape &amp; 39 escape &#39; 60 escape &lt; 62 escape &gt; lastIndex index html str substring lastIndex index lastIndex index 1 html escape lastIndex index html str substring lastIndex index html |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:42:7:42:10 | html | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:42:7:42:10 | html | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:45:0 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:45:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:45:0 | this | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:45:0 | this | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:45:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | 'arguments' object of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | 'arguments' object of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | 'arguments' object of function escapeHtml2 | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | 'arguments' object of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | 'arguments' object of function escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | exceptional return of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | exceptional return of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | exceptional return of function escapeHtml2 | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | exceptional return of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | exceptional return of function escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | functio ...  buf;\\n} | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | functio ...  buf;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | functio ...  buf;\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | return of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | return of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | return of function escapeHtml2 | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | return of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:1:65:1 | return of function escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:10:45:20 | escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:45:22:45:22 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:9 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:9 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:9 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:9 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:9 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf = "" | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf = "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf = "" | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf = "" | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:7:46:14 | buf = "" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:13:46:14 | "" | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:13:46:14 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:13:46:14 | "" | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:13:46:14 | "" | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:46:13:46:14 | "" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | i | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | i | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | i | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:10 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:21 | i < s.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:21 | i < s.length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:21 | i < s.length | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:21 | i < s.length | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:10:47:21 | i < s.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:14 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:14 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:14 | s | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:14 | s | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:14 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:21 | s.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:21 | s.length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:21 | s.length | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:21 | s.length | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:14:47:21 | s.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:16:47:21 | length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:16:47:21 | length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:16:47:21 | length | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:16:47:21 | length | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:47:16:47:21 | length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:10 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:10 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:10 | ch | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:10 | ch | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:10 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch = s[i++] | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch = s[i++] | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch = s[i++] | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch = s[i++] | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:9:48:19 | ch = s[i++] | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:14 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:14 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:14 | s | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:14 | s | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:14 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:19 | s[i++] | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:19 | s[i++] | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:19 | s[i++] | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:19 | s[i++] | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:14:48:19 | s[i++] | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:16 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:16 | i | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:16 | i | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:16 | i | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:16 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:18 | i++ | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:18 | i++ | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:18 | i++ | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:18 | i++ | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:48:16:48:18 | i++ | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:49:13:49:14 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:49:13:49:14 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:49:13:49:14 | ch | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:49:13:49:14 | ch | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:49:13:49:14 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:50:12:50:14 | '&' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:50:12:50:14 | '&' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:50:12:50:14 | '&' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:50:12:50:14 | '&' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:50:12:50:14 | '&' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:11 | buf | stringConcatenatedWith |  -endpoint- '&amp;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf += '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf += '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf += '&amp;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf += '&amp;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:9:51:22 | buf += '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:51:16:51:22 | '&amp;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:53:12:53:14 | '<' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:53:12:53:14 | '<' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:53:12:53:14 | '<' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:53:12:53:14 | '<' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:53:12:53:14 | '<' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:11 | buf | stringConcatenatedWith |  -endpoint- '&lt;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf += '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf += '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf += '&lt;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf += '&lt;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:9:54:21 | buf += '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:54:16:54:21 | '&lt;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:56:12:56:15 | '\\"' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:56:12:56:15 | '\\"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:56:12:56:15 | '\\"' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:56:12:56:15 | '\\"' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:56:12:56:15 | '\\"' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:11 | buf | stringConcatenatedWith |  -endpoint- '&quot;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf += '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf += '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf += '&quot;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf += '&quot;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:9:57:23 | buf += '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:57:16:57:23 | '&quot;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:11 | buf | stringConcatenatedWith |  -endpoint- ch |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf += ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf += ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf += ch | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf += ch | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:9:60:17 | buf += ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:60:16:60:17 | ch | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:64:10:64:12 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:64:10:64:12 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:64:10:64:12 | buf | enclosingFunctionBody | s buf  i s length ch s i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:64:10:64:12 | buf | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:64:10:64:12 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:68:0 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:68:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:68:0 | this | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:68:0 | this | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:68:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | 'arguments' object of function escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | 'arguments' object of function escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | 'arguments' object of function escapeHtml3 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | 'arguments' object of function escapeHtml3 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | 'arguments' object of function escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | exceptional return of function escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | exceptional return of function escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | exceptional return of function escapeHtml3 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | exceptional return of function escapeHtml3 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | exceptional return of function escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | functio ... ('');\\n} | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | functio ... ('');\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | functio ... ('');\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | return of function escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | return of function escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | return of function escapeHtml3 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | return of function escapeHtml3 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:1:109:1 | return of function escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:10:68:20 | escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:68:22:68:26 | value | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:7 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:7 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:7 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:7 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:7 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i = 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i = 0 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i = 0 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i = 0 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:7:69:11 | i = 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:11:69:11 | 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:11:69:11 | 0 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:11:69:11 | 0 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:11:69:11 | 0 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:69:11:69:11 | 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:70:14 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:70:14 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:70:14 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:70:14 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:70:14 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChar ... ">"\\n  } | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChar ... ">"\\n  } | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChar ... ">"\\n  } | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChar ... ">"\\n  } | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChar ... ">"\\n  } | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChars | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:7:75:3 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:18:75:3 | {\\n    A ... ">"\\n  } | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:18:75:3 | {\\n    A ... ">"\\n  } | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:18:75:3 | {\\n    A ... ">"\\n  } | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:18:75:3 | {\\n    A ... ">"\\n  } | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:70:18:75:3 | {\\n    A ... ">"\\n  } | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:7 | AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:7 | AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:7 | AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:7 | AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:7 | AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:5:71:11 | AMP: 38 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | assignedToPropName | AMP |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:71:10:71:11 | 38 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:8 | QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:8 | QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:8 | QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:8 | QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:8 | QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:5:72:12 | QUOT: 34 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | assignedToPropName | QUOT |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:72:11:72:12 | 34 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:6 | LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:6 | LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:6 | LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:6 | LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:6 | LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:5:73:10 | LT: 60 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | assignedToPropName | LT |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:73:9:73:10 | 60 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:6 | GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:6 | GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:6 | GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:6 | GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:6 | GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:5:74:10 | GT: 62 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | assignedToPropName | GT |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:74:9:74:10 | 62 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:11 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:11 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:11 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:11 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:11 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts = ... (0, i)] | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts = ... (0, i)] | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts = ... (0, i)] | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts = ... (0, i)] | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:7:77:37 | parts = ... (0, i)] | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:15:77:37 | [value. ... (0, i)] | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:15:77:37 | [value. ... (0, i)] | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:15:77:37 | [value. ... (0, i)] | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:15:77:37 | [value. ... (0, i)] | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:15:77:37 | [value. ... (0, i)] | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:20 | value | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:20 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:20 | value | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:20 | value | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:20 | value | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:30 | value.substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:30 | value.substring | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:30 | value.substring | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:30 | value.substring | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:30 | value.substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | exceptional return of value.s ... g(0, i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | exceptional return of value.s ... g(0, i) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | exceptional return of value.s ... g(0, i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | exceptional return of value.s ... g(0, i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | exceptional return of value.s ... g(0, i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:16:77:36 | value.s ... g(0, i) | stringConcatenatedWith |  -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:22:77:30 | substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:22:77:30 | substring | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:22:77:30 | substring | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:22:77:30 | substring | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:22:77:30 | substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | CalleeFlexibleAccessPath | value.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:32:77:32 | 0 | receiverName | value |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | CalleeFlexibleAccessPath | value.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:77:35:77:35 | i | receiverName | value |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:10 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:19 | i < length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:19 | i < length | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:19 | i < length | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:19 | i < length | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:10:78:19 | i < length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:14:78:19 | length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:14:78:19 | length | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:14:78:19 | length | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:14:78:19 | length | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:78:14:78:19 | length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:79:13:79:14 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:79:13:79:14 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:79:13:79:14 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:79:13:79:14 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:79:13:79:14 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:19 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:19 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:19 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:19 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:19 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:23 | XMLChars.AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:23 | XMLChars.AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:23 | XMLChars.AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:23 | XMLChars.AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:12:80:23 | XMLChars.AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:21:80:23 | AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:21:80:23 | AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:21:80:23 | AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:21:80:23 | AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:80:21:80:23 | AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:13 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:13 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:13 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:13 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:13 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:18 | parts.push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:18 | parts.push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:18 | parts.push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:18 | parts.push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:18 | parts.push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | exceptional return of parts.push('&amp;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | exceptional return of parts.push('&amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | exceptional return of parts.push('&amp;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | exceptional return of parts.push('&amp;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | exceptional return of parts.push('&amp;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | parts.push('&amp;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | parts.push('&amp;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | parts.push('&amp;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | parts.push('&amp;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:9:81:27 | parts.push('&amp;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:15:81:18 | push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:15:81:18 | push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:15:81:18 | push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:15:81:18 | push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:15:81:18 | push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | CalleeFlexibleAccessPath | parts.push |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:81:20:81:26 | '&amp;' | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:19 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:19 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:19 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:19 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:19 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:24 | XMLChars.QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:24 | XMLChars.QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:24 | XMLChars.QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:24 | XMLChars.QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:12:83:24 | XMLChars.QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:21:83:24 | QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:21:83:24 | QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:21:83:24 | QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:21:83:24 | QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:83:21:83:24 | QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:13 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:13 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:13 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:13 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:13 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:18 | parts.push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:18 | parts.push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:18 | parts.push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:18 | parts.push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:18 | parts.push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | exceptional return of parts.push('&quot;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | exceptional return of parts.push('&quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | exceptional return of parts.push('&quot;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | exceptional return of parts.push('&quot;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | exceptional return of parts.push('&quot;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | parts.push('&quot;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | parts.push('&quot;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | parts.push('&quot;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | parts.push('&quot;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:9:84:28 | parts.push('&quot;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:15:84:18 | push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:15:84:18 | push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:15:84:18 | push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:15:84:18 | push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:15:84:18 | push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | CalleeFlexibleAccessPath | parts.push |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:84:20:84:27 | '&quot;' | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:19 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:19 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:19 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:19 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:19 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:22 | XMLChars.LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:22 | XMLChars.LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:22 | XMLChars.LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:22 | XMLChars.LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:12:86:22 | XMLChars.LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:21:86:22 | LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:21:86:22 | LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:21:86:22 | LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:21:86:22 | LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:86:21:86:22 | LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:13 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:13 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:13 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:13 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:13 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:18 | parts.push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:18 | parts.push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:18 | parts.push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:18 | parts.push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:18 | parts.push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | exceptional return of parts.push('&lt;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | exceptional return of parts.push('&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | exceptional return of parts.push('&lt;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | exceptional return of parts.push('&lt;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | exceptional return of parts.push('&lt;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | parts.push('&lt;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | parts.push('&lt;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | parts.push('&lt;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | parts.push('&lt;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:9:87:26 | parts.push('&lt;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:15:87:18 | push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:15:87:18 | push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:15:87:18 | push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:15:87:18 | push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:15:87:18 | push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | CalleeFlexibleAccessPath | parts.push |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:87:20:87:25 | '&lt;' | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:19 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:19 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:19 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:19 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:19 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:22 | XMLChars.GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:22 | XMLChars.GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:22 | XMLChars.GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:22 | XMLChars.GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:12:89:22 | XMLChars.GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:21:89:22 | GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:21:89:22 | GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:21:89:22 | GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:21:89:22 | GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:89:21:89:22 | GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:13 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:13 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:13 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:13 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:13 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:18 | parts.push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:18 | parts.push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:18 | parts.push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:18 | parts.push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:18 | parts.push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | exceptional return of parts.push('&gt;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | exceptional return of parts.push('&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | exceptional return of parts.push('&gt;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | exceptional return of parts.push('&gt;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | exceptional return of parts.push('&gt;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | parts.push('&gt;') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | parts.push('&gt;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | parts.push('&gt;') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | parts.push('&gt;') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:9:90:26 | parts.push('&gt;') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:15:90:18 | push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:15:90:18 | push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:15:90:18 | push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:15:90:18 | push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:15:90:18 | push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | CalleeFlexibleAccessPath | parts.push |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:90:20:90:25 | '&gt;' | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | ++i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | ++i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | ++i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | ++i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | ++i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:5:93:7 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:7:93:7 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:7:93:7 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:7:93:7 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:7:93:7 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:93:7:93:7 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:9 | j | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:9 | j | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:9 | j | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:9 | j | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:9 | j | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j = i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j = i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j = i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j = i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:9:94:13 | j = i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:13:94:13 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:13:94:13 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:13:94:13 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:13:94:13 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:94:13:94:13 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:12 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:21 | i < length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:21 | i < length | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:21 | i < length | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:21 | i < length | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:12:95:21 | i < length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:16:95:21 | length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:16:95:21 | length | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:16:95:21 | length | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:16:95:21 | length | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:95:16:95:21 | length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:8 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:8 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:8 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:8 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:8 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:30 | ch = va ... deAt(i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:30 | ch = va ... deAt(i) | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:30 | ch = va ... deAt(i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:30 | ch = va ... deAt(i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:7:96:30 | ch = va ... deAt(i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:16 | value | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:16 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:16 | value | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:16 | value | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:16 | value | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:27 | value.charCodeAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:27 | value.charCodeAt | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:27 | value.charCodeAt | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:27 | value.charCodeAt | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:27 | value.charCodeAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | exceptional return of value.charCodeAt(i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | exceptional return of value.charCodeAt(i) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | exceptional return of value.charCodeAt(i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | exceptional return of value.charCodeAt(i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | exceptional return of value.charCodeAt(i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | value.charCodeAt(i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | value.charCodeAt(i) | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | value.charCodeAt(i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | value.charCodeAt(i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:12:96:30 | value.charCodeAt(i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:18:96:27 | charCodeAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:18:96:27 | charCodeAt | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:18:96:27 | charCodeAt | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:18:96:27 | charCodeAt | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:18:96:27 | charCodeAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | CalleeFlexibleAccessPath | value.charCodeAt |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:96:29:96:29 | i | receiverName | value |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:12 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:12 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:12 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:12 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:12 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:29 | ch === XMLChars.AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:29 | ch === XMLChars.AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:29 | ch === XMLChars.AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:29 | ch === XMLChars.AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:97:29 | ch === XMLChars.AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:28 | ch ===  ... rs.QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:28 | ch ===  ... rs.QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:28 | ch ===  ... rs.QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:28 | ch ===  ... rs.QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:28 | ch ===  ... rs.QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:50 | ch ===  ... hars.LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:50 | ch ===  ... hars.LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:50 | ch ===  ... hars.LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:50 | ch ===  ... hars.LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:98:50 | ch ===  ... hars.LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:99:26 | ch ===  ... hars.GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:99:26 | ch ===  ... hars.GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:99:26 | ch ===  ... hars.GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:99:26 | ch ===  ... hars.GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:11:99:26 | ch ===  ... hars.GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:25 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:25 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:25 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:25 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:25 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:29 | XMLChars.AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:29 | XMLChars.AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:29 | XMLChars.AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:29 | XMLChars.AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:18:97:29 | XMLChars.AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:27:97:29 | AMP | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:27:97:29 | AMP | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:27:97:29 | AMP | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:27:97:29 | AMP | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:97:27:97:29 | AMP | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:10 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:10 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:10 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:10 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:10 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:28 | ch === XMLChars.QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:28 | ch === XMLChars.QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:28 | ch === XMLChars.QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:28 | ch === XMLChars.QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:9:98:28 | ch === XMLChars.QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:23 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:23 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:23 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:23 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:23 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:28 | XMLChars.QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:28 | XMLChars.QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:28 | XMLChars.QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:28 | XMLChars.QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:16:98:28 | XMLChars.QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:25:98:28 | QUOT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:25:98:28 | QUOT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:25:98:28 | QUOT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:25:98:28 | QUOT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:25:98:28 | QUOT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:34 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:34 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:34 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:34 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:34 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:50 | ch === XMLChars.LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:50 | ch === XMLChars.LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:50 | ch === XMLChars.LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:50 | ch === XMLChars.LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:33:98:50 | ch === XMLChars.LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:47 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:47 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:47 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:47 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:47 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:50 | XMLChars.LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:50 | XMLChars.LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:50 | XMLChars.LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:50 | XMLChars.LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:40:98:50 | XMLChars.LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:49:98:50 | LT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:49:98:50 | LT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:49:98:50 | LT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:49:98:50 | LT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:98:49:98:50 | LT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:10 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:10 | ch | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:10 | ch | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:10 | ch | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:10 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:26 | ch === XMLChars.GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:26 | ch === XMLChars.GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:26 | ch === XMLChars.GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:26 | ch === XMLChars.GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:9:99:26 | ch === XMLChars.GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:23 | XMLChars | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:23 | XMLChars | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:23 | XMLChars | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:23 | XMLChars | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:23 | XMLChars | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:26 | XMLChars.GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:26 | XMLChars.GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:26 | XMLChars.GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:26 | XMLChars.GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:16:99:26 | XMLChars.GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:25:99:26 | GT | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:25:99:26 | GT | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:25:99:26 | GT | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:25:99:26 | GT | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:99:25:99:26 | GT | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:7 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:7 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:7 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:7 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:7 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i++ | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i++ | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i++ | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i++ | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:102:7:102:9 | i++ | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:9 | j | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:9 | j | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:9 | j | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:9 | j | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:9 | j | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:13 | j < i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:13 | j < i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:13 | j < i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:13 | j < i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:9:104:13 | j < i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:13:104:13 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:13:104:13 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:13:104:13 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:13:104:13 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:104:13:104:13 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:11 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:11 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:11 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:11 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:11 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:16 | parts.push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:16 | parts.push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:16 | parts.push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:16 | parts.push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:16 | parts.push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | exceptional return of parts.p ... (j, i)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | exceptional return of parts.p ... (j, i)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | exceptional return of parts.p ... (j, i)) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | exceptional return of parts.p ... (j, i)) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | exceptional return of parts.p ... (j, i)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | parts.p ... (j, i)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | parts.p ... (j, i)) | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | parts.p ... (j, i)) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | parts.p ... (j, i)) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:7:105:39 | parts.p ... (j, i)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:13:105:16 | push | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:13:105:16 | push | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:13:105:16 | push | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:13:105:16 | push | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:13:105:16 | push | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:22 | value | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:22 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:22 | value | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:22 | value | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:22 | value | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:32 | value.substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:32 | value.substring | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:32 | value.substring | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:32 | value.substring | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:32 | value.substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | exceptional return of value.s ... g(j, i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | exceptional return of value.s ... g(j, i) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | exceptional return of value.s ... g(j, i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | exceptional return of value.s ... g(j, i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | exceptional return of value.s ... g(j, i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | CalleeFlexibleAccessPath | parts.push |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:18:105:38 | value.s ... g(j, i) | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:24:105:32 | substring | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:24:105:32 | substring | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:24:105:32 | substring | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:24:105:32 | substring | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:24:105:32 | substring | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | CalleeFlexibleAccessPath | value.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:34:105:34 | j | receiverName | value |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | CalleeFlexibleAccessPath | value.substring |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:105:37:105:37 | i | receiverName | value |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:14 | parts | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:14 | parts | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:14 | parts | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:14 | parts | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:14 | parts | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:19 | parts.join | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:19 | parts.join | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:19 | parts.join | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:19 | parts.join | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:19 | parts.join | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | exceptional return of parts.join('') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | exceptional return of parts.join('') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | exceptional return of parts.join('') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | exceptional return of parts.join('') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | exceptional return of parts.join('') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | parts.join('') | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | parts.join('') | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | parts.join('') | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | parts.join('') | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:10:108:23 | parts.join('') | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:16:108:19 | join | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:16:108:19 | join | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:16:108:19 | join | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:16:108:19 | join | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:16:108:19 | join | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | CalleeFlexibleAccessPath | parts.join |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | contextSurroundingFunctionParameters | (value) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | enclosingFunctionBody | value i 0 XMLChars AMP 38 QUOT 34 LT 60 GT 62 parts value substring 0 i i length ch XMLChars AMP parts push &amp; XMLChars QUOT parts push &quot; XMLChars LT parts push &lt; XMLChars GT parts push &gt; i j i i length ch value charCodeAt i ch XMLChars AMP ch XMLChars QUOT ch XMLChars LT ch XMLChars GT i j i parts push value substring j i parts join  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | enclosingFunctionName | escapeHtml3 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:108:21:108:22 | '' | receiverName | parts |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:112:0 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:112:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:112:0 | this | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:112:0 | this | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:112:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | 'arguments' object of function escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | 'arguments' object of function escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | 'arguments' object of function escapeHtml4 | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | 'arguments' object of function escapeHtml4 | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | 'arguments' object of function escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | exceptional return of function escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | exceptional return of function escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | exceptional return of function escapeHtml4 | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | exceptional return of function escapeHtml4 | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | exceptional return of function escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | functio ...  buf;\\n} | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | functio ...  buf;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | functio ...  buf;\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | return of function escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | return of function escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | return of function escapeHtml4 | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | return of function escapeHtml4 | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:1:132:1 | return of function escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:10:112:20 | escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:112:22:112:22 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:9 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:9 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:9 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:9 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:9 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf = "" | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf = "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf = "" | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf = "" | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:7:113:14 | buf = "" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:13:113:14 | "" | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:13:113:14 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:13:113:14 | "" | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:13:113:14 | "" | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:113:13:113:14 | "" | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | i | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | i | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | i | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:10 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:21 | i < s.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:21 | i < s.length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:21 | i < s.length | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:21 | i < s.length | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:10:114:21 | i < s.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:14 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:14 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:14 | s | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:14 | s | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:14 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:21 | s.length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:21 | s.length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:21 | s.length | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:21 | s.length | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:14:114:21 | s.length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:16:114:21 | length | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:16:114:21 | length | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:16:114:21 | length | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:16:114:21 | length | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:114:16:114:21 | length | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:10 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:10 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:10 | ch | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:10 | ch | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:10 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch = s.chatAt(i++) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch = s.chatAt(i++) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch = s.chatAt(i++) | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch = s.chatAt(i++) | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:9:115:26 | ch = s.chatAt(i++) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:14 | s | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:14 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:14 | s | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:14 | s | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:14 | s | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:21 | s.chatAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:21 | s.chatAt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:21 | s.chatAt | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:21 | s.chatAt | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:21 | s.chatAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | exceptional return of s.chatAt(i++) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | exceptional return of s.chatAt(i++) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | exceptional return of s.chatAt(i++) | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | exceptional return of s.chatAt(i++) | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | exceptional return of s.chatAt(i++) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | s.chatAt(i++) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | s.chatAt(i++) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | s.chatAt(i++) | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | s.chatAt(i++) | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:14:115:26 | s.chatAt(i++) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:16:115:21 | chatAt | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:16:115:21 | chatAt | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:16:115:21 | chatAt | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:16:115:21 | chatAt | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:16:115:21 | chatAt | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:23 | i | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:23 | i | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:23 | i | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:23 | i | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:23 | i | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | CalleeFlexibleAccessPath | s.chatAt |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:115:23:115:25 | i++ | receiverName | s |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:116:13:116:14 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:116:13:116:14 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:116:13:116:14 | ch | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:116:13:116:14 | ch | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:116:13:116:14 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:117:12:117:14 | '&' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:117:12:117:14 | '&' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:117:12:117:14 | '&' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:117:12:117:14 | '&' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:117:12:117:14 | '&' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:11 | buf | stringConcatenatedWith |  -endpoint- '&amp;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf += '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf += '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf += '&amp;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf += '&amp;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:9:118:22 | buf += '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:118:16:118:22 | '&amp;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:120:12:120:14 | '<' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:120:12:120:14 | '<' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:120:12:120:14 | '<' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:120:12:120:14 | '<' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:120:12:120:14 | '<' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:11 | buf | stringConcatenatedWith |  -endpoint- '&lt;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf += '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf += '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf += '&lt;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf += '&lt;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:9:121:21 | buf += '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:121:16:121:21 | '&lt;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:123:12:123:15 | '\\"' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:123:12:123:15 | '\\"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:123:12:123:15 | '\\"' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:123:12:123:15 | '\\"' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:123:12:123:15 | '\\"' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:11 | buf | stringConcatenatedWith |  -endpoint- '&quot;' |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf += '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf += '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf += '&quot;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf += '&quot;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:9:124:23 | buf += '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:124:16:124:23 | '&quot;' | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:11 | buf | stringConcatenatedWith |  -endpoint- ch |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf += ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf += ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf += ch | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf += ch | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:9:127:17 | buf += ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:127:16:127:17 | ch | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:131:10:131:12 | buf | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:131:10:131:12 | buf | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:131:10:131:12 | buf | enclosingFunctionBody | s buf  i s length ch s chatAt i ch & buf &amp; < buf &lt; " buf &quot; buf ch buf |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:131:10:131:12 | buf | enclosingFunctionName | escapeHtml4 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:131:10:131:12 | buf | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:3 | app | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:7 | app.get | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:134:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:1:141:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:5:134:7 | get | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:5:134:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:5:134:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:9:134:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml1 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml2 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml3 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml4 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml4 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | this | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | this | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:134:21 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | exceptional return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | functio ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:22:141:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:32:134:34 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:134:37:134:39 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:11 | url | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:11 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:11 | url | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:11 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:11 | url | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url = req.params.id | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url = req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:9:135:27 | url = req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:17 | req | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:17 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:17 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:24 | req.params | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:24 | req.params | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:24 | req.params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:27 | req.params.id | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:27 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:27 | req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:27 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:15:135:27 | req.params.id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:19:135:24 | params | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:19:135:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:19:135:24 | params | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:19:135:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:19:135:24 | params | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:26:135:27 | id | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:26:135:27 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:26:135:27 | id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:26:135:27 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:135:26:135:27 | id | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:5 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:10 | res.send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | exceptional return of res.sen ... 1(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | exceptional return of res.sen ... 1(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | exceptional return of res.sen ... 1(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | exceptional return of res.sen ... 1(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | exceptional return of res.sen ... 1(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | res.sen ... 1(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | res.sen ... 1(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | res.sen ... 1(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | res.sen ... 1(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:3:137:28 | res.sen ... 1(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:7:137:10 | send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:7:137:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:7:137:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:7:137:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:7:137:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:22 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:22 | escapeHtml1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:22 | escapeHtml1 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:22 | escapeHtml1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:22 | escapeHtml1 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | escapeHtml1(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | exceptional return of escapeHtml1(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | exceptional return of escapeHtml1(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | exceptional return of escapeHtml1(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | exceptional return of escapeHtml1(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:137:12:137:27 | exceptional return of escapeHtml1(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:5 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:10 | res.send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | exceptional return of res.sen ... 2(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | exceptional return of res.sen ... 2(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | exceptional return of res.sen ... 2(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | exceptional return of res.sen ... 2(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | exceptional return of res.sen ... 2(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | res.sen ... 2(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | res.sen ... 2(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | res.sen ... 2(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | res.sen ... 2(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:3:138:28 | res.sen ... 2(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:7:138:10 | send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:7:138:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:7:138:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:7:138:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:7:138:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:22 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:22 | escapeHtml2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:22 | escapeHtml2 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:22 | escapeHtml2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:22 | escapeHtml2 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | escapeHtml2(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | exceptional return of escapeHtml2(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | exceptional return of escapeHtml2(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | exceptional return of escapeHtml2(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | exceptional return of escapeHtml2(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:138:12:138:27 | exceptional return of escapeHtml2(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:5 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:10 | res.send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | exceptional return of res.sen ... 3(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | exceptional return of res.sen ... 3(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | exceptional return of res.sen ... 3(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | exceptional return of res.sen ... 3(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | exceptional return of res.sen ... 3(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | res.sen ... 3(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | res.sen ... 3(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | res.sen ... 3(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | res.sen ... 3(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:3:139:28 | res.sen ... 3(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:7:139:10 | send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:7:139:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:7:139:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:7:139:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:7:139:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:22 | escapeHtml3 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:22 | escapeHtml3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:22 | escapeHtml3 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:22 | escapeHtml3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:22 | escapeHtml3 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | exceptional return of escapeHtml3(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | exceptional return of escapeHtml3(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | exceptional return of escapeHtml3(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | exceptional return of escapeHtml3(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:139:12:139:27 | exceptional return of escapeHtml3(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:5 | res | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:5 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:10 | res.send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:10 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | exceptional return of res.sen ... 4(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | exceptional return of res.sen ... 4(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | exceptional return of res.sen ... 4(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | exceptional return of res.sen ... 4(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | exceptional return of res.sen ... 4(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | res.sen ... 4(url)) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | res.sen ... 4(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | res.sen ... 4(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | res.sen ... 4(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:3:140:28 | res.sen ... 4(url)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:7:140:10 | send | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:7:140:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:7:140:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:7:140:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:7:140:10 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:22 | escapeHtml4 | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:22 | escapeHtml4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:22 | escapeHtml4 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:22 | escapeHtml4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:22 | escapeHtml4 | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | escapeHtml4(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | exceptional return of escapeHtml4(url) | contextFunctionInterfaces | escapeHtml1(string)\nescapeHtml2(s)\nescapeHtml3(value)\nescapeHtml4(s) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | exceptional return of escapeHtml4(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | exceptional return of escapeHtml4(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url res send escapeHtml2 url res send escapeHtml3 url res send escapeHtml4 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | exceptional return of escapeHtml4(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood3.js:140:12:140:27 | exceptional return of escapeHtml4(url) | fileImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:0 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:0 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escape | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escape | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | matchHtmlRegExp | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | matchHtmlRegExp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | matchHtmlRegExp | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | require | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | require | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:1:1:1 | textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:10 | escape | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:10 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:10 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:10 | escape | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape  ... -html') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape  ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:5:1:35 | escape  ... -html') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:20 | require | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:20 | require | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | exceptional return of require ... -html') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | exceptional return of require ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | exceptional return of require ... -html') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | require ... -html') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | require ... -html') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:14:1:35 | require ... -html') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:1:22:1:34 | 'escape-html' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:11 | express | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:11 | express | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express ... press') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:5:2:32 | express ... press') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:21 | require | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:21 | require | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | exceptional return of require('express') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | exceptional return of require('express') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | require('express') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:15:2:32 | require('express') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:2:23:2:31 | 'express' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:7 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:7 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app = express() | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:5:4:19 | app = express() | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:17 | express | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:17 | express | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | exceptional return of express() | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | express() | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:4:11:4:19 | express() | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:6:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | exceptional return of app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | exceptional return of app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:1:13:2 | exceptional return of app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:5:6:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:5:6:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:5:6:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:9:6:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | escape | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | escape | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | escape | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | escape | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | escape | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | this | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:6:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | exceptional return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | functio ...     ;\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:22:13:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:31:6:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:6:36:6:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:7:7:35 | !isVali ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:7:7:35 | !isVali ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:7:7:35 | !isVali ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:7:7:35 | !isVali ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:7:7:35 | !isVali ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:20 | isValidUserId | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:20 | isValidUserId | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:20 | isValidUserId | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:20 | isValidUserId | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:20 | isValidUserId | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | exceptional return of isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | exceptional return of isValid ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | exceptional return of isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | exceptional return of isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | exceptional return of isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | isValid ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:8:7:35 | isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:24 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:24 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:24 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:31 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:31 | req.params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:22:7:31 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:26:7:31 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:26:7:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:26:7:31 | params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:26:7:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:26:7:31 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:33:7:34 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:33:7:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:33:7:34 | id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:33:7:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:7:33:7:34 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:7 | res | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:12 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:12 | res.send | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:12 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | exceptional return of res.sen ... ms.id)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | exceptional return of res.sen ... ms.id)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | exceptional return of res.sen ... ms.id)) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | exceptional return of res.sen ... ms.id)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | exceptional return of res.sen ... ms.id)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | res.sen ... ms.id)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | res.sen ... ms.id)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | res.sen ... ms.id)) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | res.sen ... ms.id)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:5:9:54 | res.sen ... ms.id)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:9:9:12 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:9:9:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:9:9:12 | send | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:9:9:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:9:9:12 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:29 | "Unknown user: " | stringConcatenatedWith |  -endpoint- escape() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:14:9:53 | "Unknow ... ams.id) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:38 | escape | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:38 | escape | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:38 | escape | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:38 | escape | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:38 | escape | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | escape( ... ams.id) | stringConcatenatedWith | 'Unknown user: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | exceptional return of escape( ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | exceptional return of escape( ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | exceptional return of escape( ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | exceptional return of escape( ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:33:9:53 | exceptional return of escape( ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:42 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:42 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:42 | req | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:42 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:42 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:49 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:49 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:49 | req.params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:49 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:40:9:49 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:44:9:49 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:44:9:49 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:44:9:49 | params | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:44:9:49 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:44:9:49 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:51:9:52 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:51:9:52 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:51:9:52 | id | enclosingFunctionBody | req res isValidUserId req params id res send Unknown user:  escape req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:51:9:52 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:9:51:9:52 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:16:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | app.get ...  });\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | app.get ...  });\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | exceptional return of app.get ...  });\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | exceptional return of app.get ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:1:20:2 | exceptional return of app.get ...  });\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:5:16:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:5:16:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:5:16:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:9:16:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:16:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:16:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:16:21 | this | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:16:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:16:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | exceptional return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | functio ... d });\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:22:20:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:31:16:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:16:36:16:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:7:17:35 | !isVali ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:7:17:35 | !isVali ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:7:17:35 | !isVali ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:7:17:35 | !isVali ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:7:17:35 | !isVali ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:20 | isValidUserId | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:20 | isValidUserId | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:20 | isValidUserId | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:20 | isValidUserId | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:20 | isValidUserId | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | exceptional return of isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | exceptional return of isValid ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | exceptional return of isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | exceptional return of isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | exceptional return of isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | isValid ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:8:17:35 | isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:24 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:24 | req | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:24 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:31 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:31 | req.params | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:22:17:31 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:26:17:31 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:26:17:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:26:17:31 | params | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:26:17:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:26:17:31 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:33:17:34 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:33:17:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:33:17:34 | id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:33:17:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:17:33:17:34 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:7 | res | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:14 | res.render | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:14 | res.render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:14 | res.render | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:14 | res.render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:14 | res.render | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | exceptional return of res.ren ... s.id }) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | exceptional return of res.ren ... s.id }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | exceptional return of res.ren ... s.id }) | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | exceptional return of res.ren ... s.id }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | exceptional return of res.ren ... s.id }) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | res.ren ... s.id }) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | res.ren ... s.id }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | res.ren ... s.id }) | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | res.ren ... s.id }) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:5:19:60 | res.ren ... s.id }) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:9:19:14 | render | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:9:19:14 | render | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:9:19:14 | render | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:9:19:14 | render | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:9:19:14 | render | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | CalleeFlexibleAccessPath | res.render |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:16:19:36 | invalid ... emplate | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | CalleeFlexibleAccessPath | res.render |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:39:19:59 | { id: r ... ms.id } | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:42 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:42 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:42 | id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:42 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:42 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:41:19:57 | id: req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:47 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:47 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:47 | req | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:47 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:47 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:54 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:54 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:54 | req.params | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:54 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:54 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | CalleeFlexibleAccessPath | res.render |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | InputAccessPathFromCallee | 1.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | assignedToPropName | id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:45:19:57 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:49:19:54 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:49:19:54 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:49:19:54 | params | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:49:19:54 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:49:19:54 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:56:19:57 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:56:19:57 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:56:19:57 | id | enclosingFunctionBody | req res isValidUserId req params id res render invalidUserIdTemplate id req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:56:19:57 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:19:56:19:57 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:22:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | exceptional return of app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | exceptional return of app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:1:30:2 | exceptional return of app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:5:22:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:5:22:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:5:22:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:9:22:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:22:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:22:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:22:21 | this | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:22:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:22:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | exceptional return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | functio ...     ;\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:22:30:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:31:22:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:22:36:22:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:7:23:35 | !isVali ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:7:23:35 | !isVali ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:7:23:35 | !isVali ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:7:23:35 | !isVali ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:7:23:35 | !isVali ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:20 | isValidUserId | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:20 | isValidUserId | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:20 | isValidUserId | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:20 | isValidUserId | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:20 | isValidUserId | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | exceptional return of isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | exceptional return of isValid ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | exceptional return of isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | exceptional return of isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | exceptional return of isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | isValid ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:8:23:35 | isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:24 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:24 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:24 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:31 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:31 | req.params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:22:23:31 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:26:23:31 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:26:23:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:26:23:31 | params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:26:23:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:26:23:31 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:33:23:34 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:33:23:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:33:23:34 | id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:33:23:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:23:33:23:34 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:7 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:11 | res.set | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:11 | res.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:11 | res.set | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:11 | res.set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:11 | res.set | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | exceptional return of res.set ... plain') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | exceptional return of res.set ... plain') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | exceptional return of res.set ... plain') | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | exceptional return of res.set ... plain') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | exceptional return of res.set ... plain') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | res.set ... plain') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | res.set ... plain') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | res.set ... plain') | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | res.set ... plain') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:5:25:41 | res.set ... plain') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:9:25:11 | set | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:9:25:11 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:9:25:11 | set | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:9:25:11 | set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:9:25:11 | set | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:13:25:26 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:25:29:25:40 | 'text/plain' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:7 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:12 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:12 | res.send | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:12 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | exceptional return of res.sen ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | res.sen ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:5:26:46 | res.sen ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:9:26:12 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:9:26:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:9:26:12 | send | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:9:26:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:9:26:12 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:29 | "Unknown user: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:14:26:45 | "Unknow ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:35 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:35 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:35 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:42 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:42 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:42 | req.params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:42 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:42 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:33:26:45 | req.params.id | stringConcatenatedWith | 'Unknown user: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:37:26:42 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:37:26:42 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:37:26:42 | params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:37:26:42 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:37:26:42 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:44:26:45 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:44:26:45 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:44:26:45 | id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type text/plain res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:44:26:45 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:26:44:26:45 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:32:0 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:32:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:32:0 | this | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:32:0 | this | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:32:0 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | 'arguments' object of function textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | 'arguments' object of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | 'arguments' object of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | 'arguments' object of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | 'arguments' object of function textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | exceptional return of function textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | exceptional return of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | exceptional return of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | exceptional return of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | exceptional return of function textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | functio ... ain";\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | functio ... ain";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | functio ... ain";\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | return of function textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | return of function textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | return of function textContentType | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | return of function textContentType | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:1:34:1 | return of function textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:32:10:32:24 | textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:8 | result | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:8 | result | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:8 | result | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:8 | result | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:8 | result | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:23 | result  ... /plain" | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:23 | result  ... /plain" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:23 | result  ... /plain" | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:23 | result  ... /plain" | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:3:33:23 | result  ... /plain" | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:12:33:23 | "text/plain" | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:12:33:23 | "text/plain" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:12:33:23 | "text/plain" | enclosingFunctionBody | result text/plain |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:12:33:23 | "text/plain" | enclosingFunctionName | textContentType |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:33:12:33:23 | "text/plain" | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:36:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | exceptional return of app.get ...    ;\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | exceptional return of app.get ...    ;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:1:44:2 | exceptional return of app.get ...    ;\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:5:36:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:5:36:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:5:36:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:9:36:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | textContentType | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | textContentType | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | this | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:36:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | exceptional return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | functio ...     ;\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | return of anonymous function | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:22:44:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:31:36:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:36:36:36:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:7:37:35 | !isVali ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:7:37:35 | !isVali ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:7:37:35 | !isVali ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:7:37:35 | !isVali ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:7:37:35 | !isVali ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:20 | isValidUserId | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:20 | isValidUserId | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:20 | isValidUserId | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:20 | isValidUserId | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:20 | isValidUserId | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | exceptional return of isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | exceptional return of isValid ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | exceptional return of isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | exceptional return of isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | exceptional return of isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | isValid ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | isValid ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | isValid ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | isValid ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:8:37:35 | isValid ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:24 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:24 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:24 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:24 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:24 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:31 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:31 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:31 | req.params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:31 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:22:37:31 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:26:37:31 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:26:37:31 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:26:37:31 | params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:26:37:31 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:26:37:31 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:33:37:34 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:33:37:34 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:33:37:34 | id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:33:37:34 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:37:33:37:34 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:7 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:11 | res.set | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:11 | res.set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:11 | res.set | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:11 | res.set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:11 | res.set | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | exceptional return of res.set ... Type()) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | exceptional return of res.set ... Type()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | exceptional return of res.set ... Type()) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | exceptional return of res.set ... Type()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | exceptional return of res.set ... Type()) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | res.set ... Type()) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | res.set ... Type()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | res.set ... Type()) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | res.set ... Type()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:5:39:46 | res.set ... Type()) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:9:39:11 | set | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:9:39:11 | set | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:9:39:11 | set | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:9:39:11 | set | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:9:39:11 | set | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:13:39:26 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:43 | textContentType | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:43 | textContentType | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:43 | textContentType | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:43 | textContentType | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:43 | textContentType | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | exceptional return of textContentType() | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | exceptional return of textContentType() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | exceptional return of textContentType() | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | exceptional return of textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | exceptional return of textContentType() | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | CalleeFlexibleAccessPath | res.set |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:39:29:39:45 | textContentType() | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:7 | res | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:12 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:12 | res.send | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:12 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | exceptional return of res.sen ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | exceptional return of res.sen ... ams.id) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | exceptional return of res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | exceptional return of res.sen ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | res.sen ... ams.id) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | res.sen ... ams.id) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | res.sen ... ams.id) | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | res.sen ... ams.id) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:5:40:46 | res.sen ... ams.id) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:9:40:12 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:9:40:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:9:40:12 | send | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:9:40:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:9:40:12 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:29 | "Unknown user: " | stringConcatenatedWith |  -endpoint- req.params.id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:14:40:45 | "Unknow ... rams.id | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:35 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:35 | req | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:35 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:35 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:42 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:42 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:42 | req.params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:42 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:42 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:33:40:45 | req.params.id | stringConcatenatedWith | 'Unknown user: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:37:40:42 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:37:40:42 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:37:40:42 | params | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:37:40:42 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:37:40:42 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:44:40:45 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:44:40:45 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:44:40:45 | id | enclosingFunctionBody | req res isValidUserId req params id res set Content-Type textContentType res send Unknown user:  req params id |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:44:40:45 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:40:44:40:45 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:46:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | app.get ... sg);\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | app.get ... sg);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | app.get ... sg);\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | exceptional return of app.get ... sg);\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | exceptional return of app.get ... sg);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:1:51:2 | exceptional return of app.get ... sg);\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:5:46:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:5:46:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:5:46:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:9:46:15 | '/echo' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:46:17 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:46:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:46:17 | this | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:46:17 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:46:17 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | exceptional return of anonymous function | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | functio ... msg);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | return of anonymous function | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:18:51:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:27:46:29 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:46:32:46:34 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:8 | msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:8 | msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:8 | msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:8 | msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:8 | msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg = req.params.msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg = req.params.msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg = req.params.msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg = req.params.msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:6:47:25 | msg = req.params.msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:14 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:14 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:14 | req | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:14 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:21 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:21 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:21 | req.params | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:21 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:21 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:25 | req.params.msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:25 | req.params.msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:25 | req.params.msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:25 | req.params.msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:12:47:25 | req.params.msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:16:47:21 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:16:47:21 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:16:47:21 | params | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:16:47:21 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:16:47:21 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:23:47:25 | msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:23:47:25 | msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:23:47:25 | msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:23:47:25 | msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:47:23:47:25 | msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:4 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:4 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:4 | res | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:4 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:4 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:14 | res.setHeader | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:14 | res.setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:14 | res.setHeader | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:14 | res.setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:14 | res.setHeader | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | exceptional return of res.set ... /json') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | exceptional return of res.set ... /json') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | exceptional return of res.set ... /json') | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | exceptional return of res.set ... /json') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | exceptional return of res.set ... /json') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | res.set ... /json') | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | res.set ... /json') | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | res.set ... /json') | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | res.set ... /json') | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:2:48:50 | res.set ... /json') | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:6:48:14 | setHeader | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:6:48:14 | setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:6:48:14 | setHeader | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:6:48:14 | setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:6:48:14 | setHeader | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:16:48:29 | 'Content-Type' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:48:32:48:49 | 'application/json' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:4 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:4 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:4 | res | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:4 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:4 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:14 | res.setHeader | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:14 | res.setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:14 | res.setHeader | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:14 | res.setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:14 | res.setHeader | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | exceptional return of res.set ... length) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | exceptional return of res.set ... length) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | exceptional return of res.set ... length) | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | exceptional return of res.set ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | exceptional return of res.set ... length) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | res.set ... length) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | res.set ... length) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | res.set ... length) | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | res.set ... length) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:2:49:44 | res.set ... length) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:6:49:14 | setHeader | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:6:49:14 | setHeader | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:6:49:14 | setHeader | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:6:49:14 | setHeader | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:6:49:14 | setHeader | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:16:49:31 | 'Content-Length' | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:36 | msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:36 | msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:36 | msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:36 | msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:36 | msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | CalleeFlexibleAccessPath | res.setHeader |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:34:49:43 | msg.length | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:38:49:43 | length | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:38:49:43 | length | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:38:49:43 | length | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:38:49:43 | length | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:49:38:49:43 | length | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:4 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:4 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:4 | res | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:4 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:4 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:8 | res.end | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:8 | res.end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:8 | res.end | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:8 | res.end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:8 | res.end | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | exceptional return of res.end(msg) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | exceptional return of res.end(msg) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | exceptional return of res.end(msg) | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | exceptional return of res.end(msg) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | exceptional return of res.end(msg) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | res.end(msg) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | res.end(msg) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | res.end(msg) | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | res.end(msg) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:2:50:13 | res.end(msg) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:6:50:8 | end | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:6:50:8 | end | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:6:50:8 | end | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:6:50:8 | end | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:6:50:8 | end | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | enclosingFunctionBody | req res msg req params msg res setHeader Content-Type application/json res setHeader Content-Length msg length res end msg |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:50:10:50:12 | msg | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:53:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | app.get ... \\n  }\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | app.get ... \\n  }\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:1:58:2 | exceptional return of app.get ... \\n  }\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:5:53:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:5:53:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:5:53:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:9:53:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:53:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:53:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:53:21 | this | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:53:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:53:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | exceptional return of anonymous function | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | functio ... K\\n  }\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | return of anonymous function | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:22:58:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:31:53:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:53:36:53:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:11 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:11 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:11 | url | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:11 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:11 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url = req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url = req.params.id | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:9:54:27 | url = req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:17 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:17 | req | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:17 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:24 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:24 | req.params | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:24 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:27 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:27 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:27 | req.params.id | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:27 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:15:54:27 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:19:54:24 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:19:54:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:19:54:24 | params | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:19:54:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:19:54:24 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:26:54:27 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:26:54:27 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:26:54:27 | id | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:26:54:27 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:54:26:54:27 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:7:55:26 | !/["'&<>]/.exec(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:7:55:26 | !/["'&<>]/.exec(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:7:55:26 | !/["'&<>]/.exec(url) | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:7:55:26 | !/["'&<>]/.exec(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:7:55:26 | !/["'&<>]/.exec(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:16 | /["'&<>]/ | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:16 | /["'&<>]/ | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:16 | /["'&<>]/ | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:16 | /["'&<>]/ | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:16 | /["'&<>]/ | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:21 | /["'&<>]/.exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:21 | /["'&<>]/.exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:21 | /["'&<>]/.exec | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:21 | /["'&<>]/.exec | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:21 | /["'&<>]/.exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | /["'&<>]/.exec(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | /["'&<>]/.exec(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | /["'&<>]/.exec(url) | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | /["'&<>]/.exec(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | /["'&<>]/.exec(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | exceptional return of /["'&<>]/.exec(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | exceptional return of /["'&<>]/.exec(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | exceptional return of /["'&<>]/.exec(url) | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | exceptional return of /["'&<>]/.exec(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:8:55:26 | exceptional return of /["'&<>]/.exec(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:18:55:21 | exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:18:55:21 | exec | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:18:55:21 | exec | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:18:55:21 | exec | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:18:55:21 | exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | CalleeFlexibleAccessPath | ?.exec |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:55:23:55:25 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:7 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:7 | res | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:7 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:12 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:12 | res.send | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:12 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | exceptional return of res.send(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | exceptional return of res.send(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | exceptional return of res.send(url) | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | exceptional return of res.send(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | exceptional return of res.send(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | res.send(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | res.send(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | res.send(url) | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | res.send(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:5:56:17 | res.send(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:9:56:12 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:9:56:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:9:56:12 | send | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:9:56:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:9:56:12 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | enclosingFunctionBody | req res url req params id /["'&<>]/ exec url res send url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:56:14:56:16 | url | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:60:0 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:60:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:60:0 | this | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:60:0 | this | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:60:0 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | 'arguments' object of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | 'arguments' object of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | 'arguments' object of function escapeHtml1 | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | 'arguments' object of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | 'arguments' object of function escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | exceptional return of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | exceptional return of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | exceptional return of function escapeHtml1 | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | exceptional return of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | exceptional return of function escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | functio ... ;\\n  }\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | functio ... ;\\n  }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | functio ... ;\\n  }\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | return of function escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | return of function escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | return of function escapeHtml1 | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | return of function escapeHtml1 | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:1:64:1 | return of function escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:10:60:20 | escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:60:23:60:25 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:7:61:26 | !/["'&<>]/.exec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:7:61:26 | !/["'&<>]/.exec(str) | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:7:61:26 | !/["'&<>]/.exec(str) | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:7:61:26 | !/["'&<>]/.exec(str) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:7:61:26 | !/["'&<>]/.exec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:16 | /["'&<>]/ | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:16 | /["'&<>]/ | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:16 | /["'&<>]/ | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:16 | /["'&<>]/ | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:16 | /["'&<>]/ | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:21 | /["'&<>]/.exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:21 | /["'&<>]/.exec | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:21 | /["'&<>]/.exec | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:21 | /["'&<>]/.exec | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:21 | /["'&<>]/.exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | /["'&<>]/.exec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | /["'&<>]/.exec(str) | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | /["'&<>]/.exec(str) | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | /["'&<>]/.exec(str) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | /["'&<>]/.exec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | exceptional return of /["'&<>]/.exec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | exceptional return of /["'&<>]/.exec(str) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | exceptional return of /["'&<>]/.exec(str) | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | exceptional return of /["'&<>]/.exec(str) | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:8:61:26 | exceptional return of /["'&<>]/.exec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:18:61:21 | exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:18:61:21 | exec | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:18:61:21 | exec | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:18:61:21 | exec | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:18:61:21 | exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | CalleeFlexibleAccessPath | ?.exec |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:61:23:61:25 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:62:14:62:16 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:62:14:62:16 | str | contextSurroundingFunctionParameters | (str) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:62:14:62:16 | str | enclosingFunctionBody | str /["'&<>]/ exec str str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:62:14:62:16 | str | enclosingFunctionName | escapeHtml1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:62:14:62:16 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:66:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | app.get ... / OK\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:1:70:2 | exceptional return of app.get ... / OK\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:5:66:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:5:66:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:5:66:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:9:66:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | escapeHtml1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | escapeHtml1 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | escapeHtml1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | this | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:66:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | exceptional return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | functio ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:22:70:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:31:66:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:66:36:66:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:11 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:11 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:11 | url | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:11 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:11 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url = req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url = req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:9:67:27 | url = req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:17 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:17 | req | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:17 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:24 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:24 | req.params | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:24 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:27 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:27 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:27 | req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:27 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:15:67:27 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:19:67:24 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:19:67:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:19:67:24 | params | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:19:67:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:19:67:24 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:26:67:27 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:26:67:27 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:26:67:27 | id | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:26:67:27 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:67:26:67:27 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:5 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:5 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:10 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:10 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | exceptional return of res.sen ... 1(url)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | exceptional return of res.sen ... 1(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | exceptional return of res.sen ... 1(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | exceptional return of res.sen ... 1(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | exceptional return of res.sen ... 1(url)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | res.sen ... 1(url)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | res.sen ... 1(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | res.sen ... 1(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | res.sen ... 1(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:3:69:28 | res.sen ... 1(url)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:7:69:10 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:7:69:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:7:69:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:7:69:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:7:69:10 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:22 | escapeHtml1 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:22 | escapeHtml1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:22 | escapeHtml1 | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:22 | escapeHtml1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:22 | escapeHtml1 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | escapeHtml1(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | exceptional return of escapeHtml1(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | exceptional return of escapeHtml1(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | exceptional return of escapeHtml1(url) | enclosingFunctionBody | req res url req params id res send escapeHtml1 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | exceptional return of escapeHtml1(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:69:12:69:27 | exceptional return of escapeHtml1(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:21 | matchHtmlRegExp | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:21 | matchHtmlRegExp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:21 | matchHtmlRegExp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:21 | matchHtmlRegExp | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHt ... "'&<>]/ | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHt ... "'&<>]/ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHt ... "'&<>]/ | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHtmlRegExp | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHtmlRegExp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:7:72:33 | matchHtmlRegExp | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:25:72:33 | /["'&<>]/ | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:25:72:33 | /["'&<>]/ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:72:25:72:33 | /["'&<>]/ | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | matchHtmlRegExp | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | matchHtmlRegExp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | matchHtmlRegExp | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | matchHtmlRegExp | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | matchHtmlRegExp | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | this | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | this | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:73:0 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | 'arguments' object of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | 'arguments' object of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | 'arguments' object of function escapeHtml2 | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | 'arguments' object of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | 'arguments' object of function escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | exceptional return of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | exceptional return of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | exceptional return of function escapeHtml2 | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | exceptional return of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | exceptional return of function escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | functio ...     }\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | functio ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | functio ...     }\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | return of function escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | return of function escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | return of function escapeHtml2 | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | return of function escapeHtml2 | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:1:80:1 | return of function escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:10:73:20 | escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:73:23:73:28 | string | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:13 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:13 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:13 | str | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:13 | str | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:13 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str = '' + string | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str = '' + string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str = '' + string | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str = '' + string | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:11:74:27 | str = '' + string | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:18 | '' | stringConcatenatedWith |  -endpoint- string |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:27 | '' + string | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:27 | '' + string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:27 | '' + string | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:27 | '' + string | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:17:74:27 | '' + string | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:74:22:74:27 | string | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:15 | match | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:15 | match | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:15 | match | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:15 | match | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:15 | match | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match = ... ec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match = ... ec(str) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match = ... ec(str) | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match = ... ec(str) | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:11:75:43 | match = ... ec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:33 | matchHtmlRegExp | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:33 | matchHtmlRegExp | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:33 | matchHtmlRegExp | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:33 | matchHtmlRegExp | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:33 | matchHtmlRegExp | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:38 | matchHtmlRegExp.exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:38 | matchHtmlRegExp.exec | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:38 | matchHtmlRegExp.exec | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:38 | matchHtmlRegExp.exec | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:38 | matchHtmlRegExp.exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | exceptional return of matchHt ... ec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | exceptional return of matchHt ... ec(str) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | exceptional return of matchHt ... ec(str) | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | exceptional return of matchHt ... ec(str) | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | exceptional return of matchHt ... ec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | matchHt ... ec(str) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | matchHt ... ec(str) | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | matchHt ... ec(str) | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | matchHt ... ec(str) | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:19:75:43 | matchHt ... ec(str) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:35:75:38 | exec | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:35:75:38 | exec | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:35:75:38 | exec | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:35:75:38 | exec | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:35:75:38 | exec | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | CalleeFlexibleAccessPath | matchHtmlRegExp.exec |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:75:40:75:42 | str | receiverName | matchHtmlRegExp |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:9:77:14 | !match | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:9:77:14 | !match | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:9:77:14 | !match | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:9:77:14 | !match | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:9:77:14 | !match | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:10:77:14 | match | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:10:77:14 | match | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:10:77:14 | match | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:10:77:14 | match | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:77:10:77:14 | match | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:78:16:78:18 | str | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:78:16:78:18 | str | contextSurroundingFunctionParameters | (string) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:78:16:78:18 | str | enclosingFunctionBody | string str  string match matchHtmlRegExp exec str match str |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:78:16:78:18 | str | enclosingFunctionName | escapeHtml2 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:78:16:78:18 | str | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:3 | app | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:3 | app | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:7 | app.get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:82:7 | app.get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | app.get ... / OK\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:1:86:2 | exceptional return of app.get ... / OK\\n}) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:5:82:7 | get | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:5:82:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:5:82:7 | get | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:9:82:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | escapeHtml2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | escapeHtml2 | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | escapeHtml2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | this | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | this | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:82:21 | this | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | 'arguments' object of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | exceptional return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | exceptional return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | exceptional return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | functio ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | return of anonymous function | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | return of anonymous function | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:22:86:1 | return of anonymous function | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:31:82:33 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:82:36:82:38 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:11 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:11 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:11 | url | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:11 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:11 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url = req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url = req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url = req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url = req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:9:83:27 | url = req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:17 | req | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:17 | req | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:17 | req | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:24 | req.params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:24 | req.params | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:24 | req.params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:27 | req.params.id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:27 | req.params.id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:27 | req.params.id | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:27 | req.params.id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:15:83:27 | req.params.id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:19:83:24 | params | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:19:83:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:19:83:24 | params | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:19:83:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:19:83:24 | params | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:26:83:27 | id | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:26:83:27 | id | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:26:83:27 | id | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:26:83:27 | id | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:83:26:83:27 | id | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:5 | res | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:5 | res | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:5 | res | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:10 | res.send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:10 | res.send | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:10 | res.send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | exceptional return of res.sen ... 2(url)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | exceptional return of res.sen ... 2(url)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | exceptional return of res.sen ... 2(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | exceptional return of res.sen ... 2(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | exceptional return of res.sen ... 2(url)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | res.sen ... 2(url)) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | res.sen ... 2(url)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | res.sen ... 2(url)) | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | res.sen ... 2(url)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:3:85:28 | res.sen ... 2(url)) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:7:85:10 | send | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:7:85:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:7:85:10 | send | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:7:85:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:7:85:10 | send | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:22 | escapeHtml2 | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:22 | escapeHtml2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:22 | escapeHtml2 | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:22 | escapeHtml2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:22 | escapeHtml2 | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | escapeHtml2(url) | receiverName | res |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | exceptional return of escapeHtml2(url) | contextFunctionInterfaces | escapeHtml1(str)\nescapeHtml2(string)\ntextContentType() |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | exceptional return of escapeHtml2(url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | exceptional return of escapeHtml2(url) | enclosingFunctionBody | req res url req params id res send escapeHtml2 url |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | exceptional return of escapeHtml2(url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/ReflectedXssGood.js:85:12:85:27 | exceptional return of escapeHtml2(url) | fileImports | escape-html express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:0 | this | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:1:1:1 | require | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:11 | express | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:5:1:32 | express ... press') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:21 | require | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | exceptional return of require('express') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:15:1:32 | require('express') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:1:23:1:31 | 'express' | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:16 | cookieParser | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:16 | cookieParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:16 | cookieParser | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieP ... arser') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieP ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieP ... arser') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieParser | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:5:2:43 | cookieParser | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:26 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:26 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:26 | require | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | exceptional return of require ... arser') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | exceptional return of require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | exceptional return of require ... arser') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | require ... arser') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | require ... arser') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:20:2:43 | require ... arser') | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:2:28:2:42 | 'cookie-parser' | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:7 | app | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:5:4:19 | app = express() | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:17 | express | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | exceptional return of express() | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:4:11:4:19 | express() | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:3 | app | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:7 | app.use | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:7 | app.use | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:7 | app.use | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | app.use ... rser()) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | app.use ... rser()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | app.use ... rser()) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | exceptional return of app.use ... rser()) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | exceptional return of app.use ... rser()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:1:5:23 | exceptional return of app.use ... rser()) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:5:5:7 | use | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:5:5:7 | use | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:5:5:7 | use | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:20 | cookieParser | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:20 | cookieParser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:20 | cookieParser | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | CalleeFlexibleAccessPath | app.use |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | calleeImports | express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | cookieParser() | receiverName | app |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | exceptional return of cookieParser() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | exceptional return of cookieParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:5:9:5:22 | exceptional return of cookieParser() | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:3 | app | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:7:7 | app.get | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | app.get ... e]);\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | app.get ... e]);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | app.get ... e]);\\n}) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | exceptional return of app.get ... e]);\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | exceptional return of app.get ... e]);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:1:10:2 | exceptional return of app.get ... e]);\\n}) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:5:7:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:5:7:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:5:7:7 | get | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:9:7:23 | '/cookie/:name' | receiverName | app |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:7:25 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:7:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:7:25 | this | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:7:25 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:7:25 | this | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | 'arguments' object of anonymous function | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | exceptional return of anonymous function | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | functio ... me]);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | return of anonymous function | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:26:10:1 | return of anonymous function | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:35:7:37 | req | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:7:40:7:42 | res | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:5 | res | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:5 | res | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:10 | res.send | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:10 | res.send | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | exceptional return of res.sen ... .name]) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | exceptional return of res.sen ... .name]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | exceptional return of res.sen ... .name]) | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | exceptional return of res.sen ... .name]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | exceptional return of res.sen ... .name]) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | res.sen ... .name]) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | res.sen ... .name]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | res.sen ... .name]) | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | res.sen ... .name]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:3:9:66 | res.sen ... .name]) | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:7:9:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:7:9:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:7:9:10 | send | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:7:9:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:7:9:10 | send | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:34 | "Here,  ... okie: " | stringConcatenatedWith |  -endpoint- req.cookies.? |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:12:9:65 | "Here,  ... s.name] | receiverName | res |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:40 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:40 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:40 | req | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:40 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:40 | req | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:48 | req.cookies | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:48 | req.cookies | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:48 | req.cookies | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:48 | req.cookies | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:48 | req.cookies | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:38:9:65 | req.coo ... s.name] | stringConcatenatedWith | 'Here, have a cookie: ' -endpoint-  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:42:9:48 | cookies | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:42:9:48 | cookies | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:42:9:48 | cookies | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:42:9:48 | cookies | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:42:9:48 | cookies | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:52 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:52 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:52 | req | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:52 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:52 | req | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:59 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:59 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:59 | req.params | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:59 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:59 | req.params | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:64 | req.params.name | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:64 | req.params.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:64 | req.params.name | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:64 | req.params.name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:50:9:64 | req.params.name | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:54:9:59 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:54:9:59 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:54:9:59 | params | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:54:9:59 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:54:9:59 | params | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/cookies.js:9:61:9:64 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/cookies.js:9:61:9:64 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/cookies.js:9:61:9:64 | name | enclosingFunctionBody | req res res send Here, have a cookie:  req cookies req params name |
| autogenerated/Xss/ReflectedXss/cookies.js:9:61:9:64 | name | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/cookies.js:9:61:9:64 | name | fileImports | cookie-parser express |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:0 | this | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | isVarName | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | isVarName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | isVarName | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:1:1:1 | require | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:11 | express | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:5:1:32 | express ... press') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:21 | require | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | exceptional return of require('express') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:15:1:32 | require('express') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:1:23:1:31 | 'express' | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:13 | isVarName | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:13 | isVarName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:13 | isVarName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:13 | isVarName | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarNa ... -name') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarNa ... -name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarNa ... -name') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarName | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:5:2:38 | isVarName | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:23 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:23 | require | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | exceptional return of require ... -name') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | exceptional return of require ... -name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | exceptional return of require ... -name') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | require ... -name') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | require ... -name') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:17:2:38 | require ... -name') | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:2:25:2:37 | 'is-var-name' | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:7 | app | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:5:3:19 | app = express() | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:17 | express | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | exceptional return of express() | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:3:11:3:19 | express() | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:3 | app | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:5:7 | app.get | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | app.get ... se);\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | app.get ... se);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | app.get ... se);\\n}) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | exceptional return of app.get ... se);\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | exceptional return of app.get ... se);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:1:12:2 | exceptional return of app.get ... se);\\n}) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:5:5:7 | get | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:9:5:20 | "/some/path" | receiverName | app |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:5:22 | isVarName | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:5:22 | isVarName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:5:22 | isVarName | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:5:22 | isVarName | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:5:22 | isVarName | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | 'arguments' object of anonymous function | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | (req, r ... nse);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | exceptional return of anonymous function | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | exceptional return of anonymous function | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | return of anonymous function | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:23:12:1 | return of anonymous function | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:24:5:26 | req | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:5:29:5:31 | res | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:14 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:14 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:14 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:14 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:14 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | respons ... world!" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | respons ... world!" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | respons ... world!" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | respons ... world!" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | respons ... world!" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | response | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:7:6:32 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:18:6:32 | "Hello, world!" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:18:6:32 | "Hello, world!" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:18:6:32 | "Hello, world!" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:18:6:32 | "Hello, world!" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:6:18:6:32 | "Hello, world!" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:8 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:8 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:8 | req | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:8 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:8 | req | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:14 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:14 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:14 | req.query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:14 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:14 | req.query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:20 | req.query.jsonp | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:20 | req.query.jsonp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:20 | req.query.jsonp | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:20 | req.query.jsonp | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:20 | req.query.jsonp | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:50 | req.que ... .jsonp) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:50 | req.que ... .jsonp) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:50 | req.que ... .jsonp) | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:50 | req.que ... .jsonp) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:6:8:50 | req.que ... .jsonp) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:10:8:14 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:10:8:14 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:10:8:14 | query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:10:8:14 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:10:8:14 | query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:16:8:20 | jsonp | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:16:8:20 | jsonp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:16:8:20 | jsonp | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:16:8:20 | jsonp | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:16:8:20 | jsonp | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:33 | isVarName | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:33 | isVarName | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:33 | isVarName | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:33 | isVarName | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:33 | isVarName | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | exceptional return of isVarNa ... .jsonp) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | exceptional return of isVarNa ... .jsonp) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | exceptional return of isVarNa ... .jsonp) | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | exceptional return of isVarNa ... .jsonp) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | exceptional return of isVarNa ... .jsonp) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | isVarNa ... .jsonp) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | isVarNa ... .jsonp) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | isVarNa ... .jsonp) | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | isVarNa ... .jsonp) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:25:8:50 | isVarNa ... .jsonp) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:37 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:37 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:37 | req | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:37 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:37 | req | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:43 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:43 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:43 | req.query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:43 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:35:8:43 | req.query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:39:8:43 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:39:8:43 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:39:8:43 | query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:39:8:43 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:39:8:43 | query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:45:8:49 | jsonp | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:45:8:49 | jsonp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:45:8:49 | jsonp | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:45:8:49 | jsonp | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:8:45:8:49 | jsonp | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:12 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:12 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:12 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:12 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:12 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | respons ... e + ")" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | respons ... e + ")" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | respons ... e + ")" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | respons ... e + ")" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | respons ... e + ")" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | response | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:5:9:53 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:18 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:18 | req | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:18 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:18 | req | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:24 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:24 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:24 | req.query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:24 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:24 | req.query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:30 | req.query.jsonp | stringConcatenatedWith |  -endpoint- '(' + 'Hello, world!' + ')' |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:36 | req.que ... p + "(" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:36 | req.que ... p + "(" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:36 | req.que ... p + "(" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:36 | req.que ... p + "(" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:36 | req.que ... p + "(" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:47 | req.que ... esponse | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:47 | req.que ... esponse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:47 | req.que ... esponse | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:47 | req.que ... esponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:47 | req.que ... esponse | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:53 | req.que ... e + ")" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:53 | req.que ... e + ")" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:53 | req.que ... e + ")" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:53 | req.que ... e + ")" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:16:9:53 | req.que ... e + ")" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:20:9:24 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:20:9:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:20:9:24 | query | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:20:9:24 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:20:9:24 | query | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:26:9:30 | jsonp | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:26:9:30 | jsonp | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:26:9:30 | jsonp | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:26:9:30 | jsonp | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:26:9:30 | jsonp | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:34:9:36 | "(" | stringConcatenatedWith | req.query.jsonp -endpoint- 'Hello, world!' + ')' |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:40:9:47 | response | stringConcatenatedWith | req.query.jsonp + '(' -endpoint- ')' |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:9:51:9:53 | ")" | stringConcatenatedWith | req.query.jsonp + '(' + 'Hello, world!' -endpoint-  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:3 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:3 | response | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:3 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:3 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:3 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:5 | res | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:5 | res | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:10 | res.send | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:10 | res.send | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | exceptional return of res.send(response) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | exceptional return of res.send(response) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | exceptional return of res.send(response) | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | exceptional return of res.send(response) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | exceptional return of res.send(response) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | res.send(response) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | res.send(response) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | res.send(response) | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | res.send(response) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:3:11:20 | res.send(response) | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:7:11:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:7:11:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:7:11:10 | send | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:7:11:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:7:11:10 | send | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | enclosingFunctionBody | req res response Hello, world! req query jsonp isVarName req query jsonp response req query jsonp ( response ) res send response |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | fileImports | express is-var-name |
| autogenerated/Xss/ReflectedXss/etherpad.js:11:12:11:19 | response | receiverName | res |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:0 | this | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:1:1:1 | require | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:11 | express | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:5:1:32 | express ... press') | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:21 | require | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | exceptional return of require('express') | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:15:1:32 | require('express') | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:1:23:1:31 | 'express' | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:7 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:7 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:7 | express | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | exceptional return of express() | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:9 | express() | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:13 | express().get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:13 | express().get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:3:13 | express().get | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | exceptional return of express ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | exceptional return of express ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | exceptional return of express ... T OK\\n}) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | express ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | express ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:1:8:2 | express ... T OK\\n}) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:11:3:13 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:11:3:13 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:11:3:13 | get | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:15:3:22 | '/user/' | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | require | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | require | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | require | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | this | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | this | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:3:24 | this | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | 'arguments' object of anonymous function | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | exceptional return of anonymous function | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | exceptional return of anonymous function | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | functio ... OT OK\\n} | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | return of anonymous function | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:25:8:1 | return of anonymous function | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:34:3:36 | req | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:3:39:3:41 | res | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:12 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:12 | evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:12 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:12 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:12 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil =  ... ry.evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil =  ... ry.evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil =  ... ry.evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil =  ... ry.evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:9:4:29 | evil =  ... ry.evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:18 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:18 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:18 | req | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:18 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:18 | req | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:24 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:24 | req.query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:24 | req.query | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:24 | req.query | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:24 | req.query | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:29 | req.query.evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:29 | req.query.evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:29 | req.query.evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:29 | req.query.evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:16:4:29 | req.query.evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:20:4:24 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:20:4:24 | query | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:20:4:24 | query | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:20:4:24 | query | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:20:4:24 | query | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:4:26:4:29 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:4:26:4:29 | evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:4:26:4:29 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:4:26:4:29 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:4:26:4:29 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:7 | res | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:7 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:7 | res | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:12 | res.send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:12 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:12 | res.send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | exceptional return of res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | exceptional return of res.sen ...  evil)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | exceptional return of res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | exceptional return of res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | exceptional return of res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | res.sen ...  evil)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:5:5:48 | res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:9:5:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:9:5:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:9:5:12 | send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:9:5:12 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:9:5:12 | send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:20 | console | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:20 | console | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:20 | console | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:20 | console | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:20 | console | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:24 | console.log | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:24 | console.log | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:24 | console.log | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:24 | console.log | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:24 | console.log | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | console ... , evil) | receiverName | res |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | exceptional return of console ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | exceptional return of console ... , evil) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | exceptional return of console ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | exceptional return of console ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:14:5:47 | exceptional return of console ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:22:5:24 | log | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:22:5:24 | log | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:22:5:24 | log | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:22:5:24 | log | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:22:5:24 | log | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:26:5:40 | "<div>%s</div>" | receiverName | console |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:5:43:5:46 | evil | receiverName | console |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:7 | res | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:7 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:7 | res | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:12 | res.send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:12 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:12 | res.send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | exceptional return of res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | exceptional return of res.sen ...  evil)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | exceptional return of res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | exceptional return of res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | exceptional return of res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | res.sen ...  evil)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:5:6:48 | res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:9:6:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:9:6:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:9:6:12 | send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:9:6:12 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:9:6:12 | send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:17 | util | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:17 | util | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:17 | util | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:17 | util | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:17 | util | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:24 | util.format | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:24 | util.format | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:24 | util.format | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:24 | util.format | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:24 | util.format | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | exceptional return of util.fo ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | exceptional return of util.fo ... , evil) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | exceptional return of util.fo ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | exceptional return of util.fo ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | exceptional return of util.fo ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:14:6:47 | util.fo ... , evil) | receiverName | res |
| autogenerated/Xss/ReflectedXss/formatting.js:6:19:6:24 | format | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:19:6:24 | format | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:19:6:24 | format | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:19:6:24 | format | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:19:6:24 | format | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | CalleeFlexibleAccessPath | util.format |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:26:6:40 | "<div>%s</div>" | receiverName | util |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | CalleeFlexibleAccessPath | util.format |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:6:43:6:46 | evil | receiverName | util |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:7 | res | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:7 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:7 | res | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:12 | res.send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:12 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:12 | res.send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | exceptional return of res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | exceptional return of res.sen ...  evil)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | exceptional return of res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | exceptional return of res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | exceptional return of res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | res.sen ...  evil)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | res.sen ...  evil)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | res.sen ...  evil)) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | res.sen ...  evil)) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:5:7:54 | res.sen ...  evil)) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:9:7:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:9:7:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:9:7:12 | send | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:9:7:12 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:9:7:12 | send | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:20 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:20 | require | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:20 | require | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:20 | require | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:20 | require | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | exceptional return of require("printf") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | exceptional return of require("printf") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | exceptional return of require("printf") | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | exceptional return of require("printf") | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | exceptional return of require("printf") | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | require("printf") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | require("printf") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | require("printf") | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | require("printf") | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:30 | require("printf") | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | exceptional return of require ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | exceptional return of require ... , evil) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | exceptional return of require ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | exceptional return of require ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | exceptional return of require ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:14:7:53 | require ... , evil) | receiverName | res |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:22:7:29 | "printf" | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | calleeImports | printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:32:7:46 | "<div>%s</div>" | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | calleeImports | printf |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | enclosingFunctionBody | req res evil req query evil res send console log <div>%s</div> evil res send util format <div>%s</div> evil res send require printf <div>%s</div> evil |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/formatting.js:7:49:7:52 | evil | fileImports | express printf |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:0 | this | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:1:1:1 | require | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:14 | liveServer | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:14 | liveServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:14 | liveServer | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveSer ... erver") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveSer ... erver") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveSer ... erver") | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveServer | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:5:1:39 | liveServer | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:24 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:24 | require | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | exceptional return of require ... erver") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | exceptional return of require ... erver") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | exceptional return of require ... erver") | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | require ... erver") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | require ... erver") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:18:1:39 | require ... erver") | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:1:26:1:38 | "live-server" | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:3:16 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:3:16 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:3:16 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middlew ... T OK\\n}] | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middlew ... T OK\\n}] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middlew ... T OK\\n}] | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:7:7:2 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:20:7:2 | [functi ... T OK\\n}] | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:20:7:2 | [functi ... T OK\\n}] | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:20:7:2 | [functi ... T OK\\n}] | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:3:20 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:3:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:3:20 | this | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:3:20 | this | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:3:20 | this | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | 'arguments' object of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | exceptional return of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | functio ... OT OK\\n} | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | return of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:21:7:1 | return of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:30:3:32 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:35:3:37 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:3:40:3:43 | next | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:40:3:43 | next | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:3:40:3:43 | next | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:3:40:3:43 | next | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:3:40:3:43 | next | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:17 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:17 | tainted | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:17 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:17 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:17 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted = req.url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted = req.url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted = req.url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted = req.url | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:11:4:27 | tainted = req.url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:23 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:23 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:23 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:23 | req | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:23 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:27 | req.url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:27 | req.url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:27 | req.url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:27 | req.url | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:21:4:27 | req.url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:4:25:4:27 | url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:25:4:27 | url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:4:25:4:27 | url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:4:25:4:27 | url | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:4:25:4:27 | url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:7 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:7 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:7 | res | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:7 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:11 | res.end | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:11 | res.end | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:11 | res.end | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:11 | res.end | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:11 | res.end | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | exceptional return of res.end ... html>`) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | exceptional return of res.end ... html>`) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | exceptional return of res.end ... html>`) | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | exceptional return of res.end ... html>`) | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | exceptional return of res.end ... html>`) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | res.end ... html>`) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | res.end ... html>`) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | res.end ... html>`) | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | res.end ... html>`) | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:5:6:51 | res.end ... html>`) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:9:6:11 | end | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:9:6:11 | end | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:9:6:11 | end | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:9:6:11 | end | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:9:6:11 | end | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:13:6:50 | `<html> ... /html>` | receiverName | res |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:14:6:25 | <html><body> | stringConcatenatedWith |  -endpoint- tainted + '</body></html>' |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:28:6:34 | tainted | stringConcatenatedWith | '<html><body>' -endpoint- '</body></html>' |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | enclosingFunctionName |  |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:6:36:6:49 | </body></html> | stringConcatenatedWith | '<html><body>' + tainted -endpoint-  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:10 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:10 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:10 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:15 | middleware.push | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:15 | middleware.push | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:9:15 | middleware.push | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | exceptional return of middlew ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | exceptional return of middlew ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | exceptional return of middlew ... T OK\\n}) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | middlew ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | middlew ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:1:13:2 | middlew ... T OK\\n}) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:12:9:15 | push | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:12:9:15 | push | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:12:9:15 | push | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:9:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:9:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:9:16 | this | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:9:16 | this | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:9:16 | this | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | 'arguments' object of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | exceptional return of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | exceptional return of anonymous function | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | exceptional return of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | middleware.push |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | functio ... OT OK\\n} | receiverName | middleware |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | return of anonymous function | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | return of anonymous function | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:17:13:1 | return of anonymous function | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:26:9:28 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:31:9:33 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:9:36:9:39 | next | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:9:36:9:39 | next | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:9:36:9:39 | next | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:9:36:9:39 | next | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:9:36:9:39 | next | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:17 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:17 | tainted | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:17 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:17 | tainted | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:17 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted = req.url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted = req.url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted = req.url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted = req.url | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:11:10:27 | tainted = req.url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:23 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:23 | req | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:23 | req | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:23 | req | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:23 | req | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:27 | req.url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:27 | req.url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:27 | req.url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:27 | req.url | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:21:10:27 | req.url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:10:25:10:27 | url | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:10:25:10:27 | url | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:10:25:10:27 | url | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:10:25:10:27 | url | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:10:25:10:27 | url | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:7 | res | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:7 | res | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:7 | res | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:7 | res | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:11 | res.end | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:11 | res.end | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:11 | res.end | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:11 | res.end | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:11 | res.end | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | exceptional return of res.end ... html>`) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | exceptional return of res.end ... html>`) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | exceptional return of res.end ... html>`) | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | exceptional return of res.end ... html>`) | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | exceptional return of res.end ... html>`) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | res.end ... html>`) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | res.end ... html>`) | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | res.end ... html>`) | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | res.end ... html>`) | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:5:12:51 | res.end ... html>`) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:9:12:11 | end | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:9:12:11 | end | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:9:12:11 | end | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:9:12:11 | end | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:9:12:11 | end | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | CalleeFlexibleAccessPath | res.end |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:13:12:50 | `<html> ... /html>` | receiverName | res |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:14:12:25 | <html><body> | stringConcatenatedWith |  -endpoint- tainted + '</body></html>' |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:28:12:34 | tainted | stringConcatenatedWith | '<html><body>' -endpoint- '</body></html>' |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | contextSurroundingFunctionParameters | (req, res, next) |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | enclosingFunctionBody | req res next tainted req url res end <html><body> tainted </body></html> |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | enclosingFunctionName | middleware.push#functionalargument |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:12:36:12:49 | </body></html> | stringConcatenatedWith | '<html><body>' + tainted -endpoint-  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:15:10 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:15:10 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:15:10 | params | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params  ... eware\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params  ... eware\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:5:17:1 | params  ... eware\\n} | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:15:14:17:1 | {\\n    middleware\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:14:17:1 | {\\n    middleware\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:15:14:17:1 | {\\n    middleware\\n} | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | assignedToPropName | middleware |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:16:5:16:14 | middleware | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:10 | liveServer | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:10 | liveServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:10 | liveServer | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:16 | liveServer.start | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:16 | liveServer.start | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:16 | liveServer.start | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | exceptional return of liveSer ... params) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | exceptional return of liveSer ... params) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | exceptional return of liveSer ... params) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | liveSer ... params) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | liveSer ... params) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:1:18:24 | liveSer ... params) | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:12:18:16 | start | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:12:18:16 | start | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:12:18:16 | start | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | CalleeFlexibleAccessPath | liveServer.start |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | calleeImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | fileImports | live-server |
| autogenerated/Xss/ReflectedXss/live-server.js:18:18:18:23 | params | receiverName | liveServer |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:1:1:0 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:1:15 | this | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:1:15 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:1:15 | this | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:1:15 | this | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:1:15 | this | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | 'arguments' object of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | 'arguments' object of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | 'arguments' object of function handler | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | 'arguments' object of function handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | 'arguments' object of function handler | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | exceptional return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | exceptional return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | exceptional return of function handler | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | exceptional return of function handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | exceptional return of function handler | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | functio ... url);\\n} | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | functio ... url);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | functio ... url);\\n} | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | return of function handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | return of function handler | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | return of function handler | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | return of function handler | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:16:3:1 | return of function handler | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:25:1:31 | handler | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:25:1:31 | handler | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:25:1:31 | handler | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:33:1:35 | req | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:1:38:1:40 | res | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:7 | res | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:7 | res | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:7 | res | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:7 | res | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:12 | res.send | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:12 | res.send | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:12 | res.send | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:12 | res.send | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | exceptional return of res.send(req.url) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | exceptional return of res.send(req.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | exceptional return of res.send(req.url) | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | exceptional return of res.send(req.url) | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | exceptional return of res.send(req.url) | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | res.send(req.url) | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | res.send(req.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | res.send(req.url) | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | res.send(req.url) | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:5:2:21 | res.send(req.url) | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:9:2:12 | send | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:9:2:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:9:2:12 | send | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:9:2:12 | send | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:9:2:12 | send | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:16 | req | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:16 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:16 | req | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:16 | req | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:16 | req | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | fileImports |  |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:14:2:20 | req.url | receiverName | res |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:18:2:20 | url | contextFunctionInterfaces | handler(req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:18:2:20 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:18:2:20 | url | enclosingFunctionBody | req res res send req url |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:18:2:20 | url | enclosingFunctionName | handler |
| autogenerated/Xss/ReflectedXss/pages/api/myapi.js:2:18:2:20 | url | fileImports |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:0 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:0 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | R | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | R | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | R | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | lodash | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | lodash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | lodash | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | require | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | require | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | underscore | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | underscore | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:1:1:1 | underscore | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:11 | express | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:11 | express | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:5:1:32 | express ... press') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:21 | require | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:21 | require | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | exceptional return of require('express') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | require('express') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:15:1:32 | require('express') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:1:23:1:31 | 'express' | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:14 | underscore | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:14 | underscore | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:14 | underscore | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:14 | underscore | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | undersc ... score') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | undersc ... score') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | undersc ... score') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | underscore | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | underscore | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:5:2:38 | underscore | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:24 | require | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:24 | require | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | exceptional return of require ... score') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | exceptional return of require ... score') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | exceptional return of require ... score') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | require ... score') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | require ... score') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:18:2:38 | require ... score') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:2:26:2:37 | 'underscore' | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:10 | lodash | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:10 | lodash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:10 | lodash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:10 | lodash | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash  ... odash') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash  ... odash') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:5:3:30 | lodash  ... odash') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:20 | require | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:20 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:20 | require | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | exceptional return of require('lodash') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | exceptional return of require('lodash') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | exceptional return of require('lodash') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | require('lodash') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | require('lodash') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:14:3:30 | require('lodash') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:3:22:3:29 | 'lodash' | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:5 | R | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:5 | R | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:5 | R | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:5 | R | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R = require('ramda') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R = require('ramda') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:5:4:24 | R = require('ramda') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:15 | require | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:15 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:15 | require | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | exceptional return of require('ramda') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | exceptional return of require('ramda') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | exceptional return of require('ramda') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | require('ramda') | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | require('ramda') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:9:4:24 | require('ramda') | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:4:17:4:23 | 'ramda' | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:7 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:7 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app = express() | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:5:6:19 | app = express() | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:17 | express | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:17 | express | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | exceptional return of express() | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | exceptional return of express() | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | express() | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:6:11:6:19 | express() | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:3 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:3 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:7 | app.get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:8:7 | app.get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | exceptional return of app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | exceptional return of app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:1:15:2 | exceptional return of app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:5:8:7 | get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:5:8:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:5:8:7 | get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:9:8:20 | "/some/path" | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:8:23 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:8:23 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:8:23 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:8:23 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:8:23 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | 'arguments' object of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | (req, r ... ack);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | exceptional return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:23:15:1 | return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:24:8:26 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:8:29:8:31 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | this | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:9:2 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | 'arguments' object of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | 'arguments' object of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | 'arguments' object of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | 'arguments' object of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | 'arguments' object of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | exceptional return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | exceptional return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | exceptional return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | exceptional return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | exceptional return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | functio ...  OK\\n  } | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | functio ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | functio ...  OK\\n  } | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:3:11:3 | return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:12:9:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:25:9:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:9:28:9:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:7 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:7 | res | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:7 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:7 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:12 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:12 | res.send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:12 | res.send | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:12 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | exceptional return of res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | exceptional return of res.send(x + y) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | exceptional return of res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | exceptional return of res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | exceptional return of res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | res.send(x + y) | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:5:10:19 | res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:9:10:12 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:9:10:12 | send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:9:10:12 | send | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:9:10:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:9:10:12 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:14 | x | stringConcatenatedWith |  -endpoint- y |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:14:10:18 | x + y | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:10:18:10:18 | y | stringConcatenatedWith | x -endpoint-  |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:14 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:14 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:14 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:14 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:14 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callbac ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callbac ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callbac ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callbac ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callbac ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callback | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:7:13:49 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:29 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:29 | sendResponse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:29 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:29 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:29 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:34 | sendResponse.bind | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:34 | sendResponse.bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:34 | sendResponse.bind | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:34 | sendResponse.bind | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:34 | sendResponse.bind | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | exceptional return of sendRes ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | exceptional return of sendRes ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | exceptional return of sendRes ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | exceptional return of sendRes ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | exceptional return of sendRes ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | sendRes ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | sendRes ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | sendRes ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | sendRes ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:18:13:49 | sendRes ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:31:13:34 | bind | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:31:13:34 | bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:31:13:34 | bind | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:31:13:34 | bind | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:31:13:34 | bind | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | CalleeFlexibleAccessPath | sendResponse.bind |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:36:13:39 | null | receiverName | sendResponse |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:44 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:44 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:44 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:44 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:44 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | CalleeFlexibleAccessPath | sendResponse.bind |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:13:42:13:48 | req.url | receiverName | sendResponse |
| autogenerated/Xss/ReflectedXss/partial.js:13:46:13:48 | url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:13:46:13:48 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:13:46:13:48 | url | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:13:46:13:48 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:13:46:13:48 | url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:11 | [1, 2, 3] | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:11 | [1, 2, 3] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:11 | [1, 2, 3] | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:11 | [1, 2, 3] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:11 | [1, 2, 3] | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:19 | [1, 2, 3].forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:19 | [1, 2, 3].forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:19 | [1, 2, 3].forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:19 | [1, 2, 3].forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:19 | [1, 2, 3].forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | [1, 2,  ... llback) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | exceptional return of [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | exceptional return of [1, 2,  ... llback) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:3:14:29 | exceptional return of [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:4:14:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:7:14:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:10:14:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:13:14:19 | forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:13:14:19 | forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:13:14:19 | forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:13:14:19 | forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:13:14:19 | forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | CalleeFlexibleAccessPath | ?.forEach |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback sendResponse bind null req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:14:21:14:28 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:3 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:3 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:7 | app.get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:17:7 | app.get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | exceptional return of app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | exceptional return of app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:1:24:2 | exceptional return of app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:5:17:7 | get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:5:17:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:5:17:7 | get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:9:17:21 | "/underscore" | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:23 | underscore | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:23 | underscore | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:23 | underscore | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:23 | underscore | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:23 | underscore | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:24 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:24 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:24 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:24 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:17:24 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | 'arguments' object of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | (req, r ... ack);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | exceptional return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:24:24:1 | return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:25:17:27 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:17:30:17:32 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | this | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:18:2 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | 'arguments' object of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | 'arguments' object of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | 'arguments' object of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | 'arguments' object of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | 'arguments' object of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | exceptional return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | exceptional return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | exceptional return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | exceptional return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | exceptional return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | functio ...  OK\\n  } | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | functio ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | functio ...  OK\\n  } | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:3:20:3 | return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:12:18:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:25:18:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:18:28:18:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:7 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:7 | res | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:7 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:7 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:12 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:12 | res.send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:12 | res.send | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:12 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | exceptional return of res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | exceptional return of res.send(x + y) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | exceptional return of res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | exceptional return of res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | exceptional return of res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | res.send(x + y) | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:5:19:19 | res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:9:19:12 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:9:19:12 | send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:9:19:12 | send | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:9:19:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:9:19:12 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:14 | x | stringConcatenatedWith |  -endpoint- y |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:14:19:18 | x + y | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:19:18:19:18 | y | stringConcatenatedWith | x -endpoint-  |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:14 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:14 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:14 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:14 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:14 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callbac ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callbac ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callbac ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callbac ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callbac ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callback | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:7:22:58 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:27 | underscore | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:27 | underscore | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:27 | underscore | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:27 | underscore | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:27 | underscore | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:35 | underscore.partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:35 | underscore.partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:35 | underscore.partial | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:35 | underscore.partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:35 | underscore.partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | exceptional return of undersc ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | exceptional return of undersc ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | exceptional return of undersc ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | exceptional return of undersc ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | exceptional return of undersc ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | undersc ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | undersc ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | undersc ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | undersc ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:18:22:58 | undersc ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:29:22:35 | partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:29:22:35 | partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:29:22:35 | partial | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:29:22:35 | partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:29:22:35 | partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | CalleeFlexibleAccessPath | underscore.partial |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | calleeImports | underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:37:22:48 | sendResponse | receiverName | underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:53 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:53 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:53 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:53 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:53 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | CalleeFlexibleAccessPath | underscore.partial |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | calleeImports | underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:51:22:57 | req.url | receiverName | underscore |
| autogenerated/Xss/ReflectedXss/partial.js:22:55:22:57 | url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:22:55:22:57 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:22:55:22:57 | url | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:22:55:22:57 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:22:55:22:57 | url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:11 | [1, 2, 3] | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:11 | [1, 2, 3] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:11 | [1, 2, 3] | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:11 | [1, 2, 3] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:11 | [1, 2, 3] | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:19 | [1, 2, 3].forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:19 | [1, 2, 3].forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:19 | [1, 2, 3].forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:19 | [1, 2, 3].forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:19 | [1, 2, 3].forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | [1, 2,  ... llback) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | exceptional return of [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | exceptional return of [1, 2,  ... llback) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:3:23:29 | exceptional return of [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:4:23:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:7:23:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:10:23:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:13:23:19 | forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:13:23:19 | forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:13:23:19 | forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:13:23:19 | forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:13:23:19 | forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | CalleeFlexibleAccessPath | ?.forEach |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback underscore partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:23:21:23:28 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:3 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:3 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:7 | app.get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:26:7 | app.get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | exceptional return of app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | exceptional return of app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:1:33:2 | exceptional return of app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:5:26:7 | get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:5:26:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:5:26:7 | get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:9:26:17 | "/lodash" | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:19 | lodash | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:19 | lodash | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:19 | lodash | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:19 | lodash | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:19 | lodash | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:20 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:20 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:20 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:20 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:26:20 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | 'arguments' object of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | (req, r ... ack);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | exceptional return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:20:33:1 | return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:21:26:23 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:26:26:26:28 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | this | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:27:2 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | 'arguments' object of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | 'arguments' object of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | 'arguments' object of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | 'arguments' object of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | 'arguments' object of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | exceptional return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | exceptional return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | exceptional return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | exceptional return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | exceptional return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | functio ...  OK\\n  } | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | functio ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | functio ...  OK\\n  } | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:3:29:3 | return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:12:27:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:25:27:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:27:28:27:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:7 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:7 | res | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:7 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:7 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:12 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:12 | res.send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:12 | res.send | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:12 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | exceptional return of res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | exceptional return of res.send(x + y) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | exceptional return of res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | exceptional return of res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | exceptional return of res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | res.send(x + y) | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:5:28:19 | res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:9:28:12 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:9:28:12 | send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:9:28:12 | send | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:9:28:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:9:28:12 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:14 | x | stringConcatenatedWith |  -endpoint- y |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:14:28:18 | x + y | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:28:18:28:18 | y | stringConcatenatedWith | x -endpoint-  |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:14 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:14 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:14 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:14 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:14 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callbac ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callbac ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callbac ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callbac ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callbac ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callback | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:7:31:54 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:23 | lodash | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:23 | lodash | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:23 | lodash | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:23 | lodash | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:23 | lodash | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:31 | lodash.partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:31 | lodash.partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:31 | lodash.partial | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:31 | lodash.partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:31 | lodash.partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | exceptional return of lodash. ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | exceptional return of lodash. ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | exceptional return of lodash. ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | exceptional return of lodash. ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | exceptional return of lodash. ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | lodash. ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | lodash. ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | lodash. ... eq.url) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | lodash. ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:18:31:54 | lodash. ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:25:31:31 | partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:25:31:31 | partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:25:31:31 | partial | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:25:31:31 | partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:25:31:31 | partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | CalleeFlexibleAccessPath | lodash.partial |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | calleeImports | lodash |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:33:31:44 | sendResponse | receiverName | lodash |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:49 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:49 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:49 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:49 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:49 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | CalleeFlexibleAccessPath | lodash.partial |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | calleeImports | lodash |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:31:47:31:53 | req.url | receiverName | lodash |
| autogenerated/Xss/ReflectedXss/partial.js:31:51:31:53 | url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:31:51:31:53 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:31:51:31:53 | url | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:31:51:31:53 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:31:51:31:53 | url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:11 | [1, 2, 3] | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:11 | [1, 2, 3] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:11 | [1, 2, 3] | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:11 | [1, 2, 3] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:11 | [1, 2, 3] | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:19 | [1, 2, 3].forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:19 | [1, 2, 3].forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:19 | [1, 2, 3].forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:19 | [1, 2, 3].forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:19 | [1, 2, 3].forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | [1, 2,  ... llback) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | exceptional return of [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | exceptional return of [1, 2,  ... llback) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:3:32:29 | exceptional return of [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:4:32:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:7:32:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:10:32:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:13:32:19 | forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:13:32:19 | forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:13:32:19 | forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:13:32:19 | forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:13:32:19 | forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | CalleeFlexibleAccessPath | ?.forEach |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback lodash partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:32:21:32:28 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:3 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:3 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:7 | app.get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:35:7 | app.get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | exceptional return of app.get ... ck);\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | exceptional return of app.get ... ck);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:1:42:2 | exceptional return of app.get ... ck);\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:5:35:7 | get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:5:35:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:5:35:7 | get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:9:35:16 | "/ramda" | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:18 | R | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:18 | R | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:18 | R | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:18 | R | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:18 | R | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:19 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:19 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:19 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:19 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:35:19 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | 'arguments' object of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | (req, r ... ack);\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | exceptional return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | exceptional return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | return of anonymous function | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:19:42:1 | return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:20:35:22 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:35:25:35:27 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | this | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:36:2 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | 'arguments' object of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | 'arguments' object of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | 'arguments' object of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | 'arguments' object of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | 'arguments' object of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | exceptional return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | exceptional return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | exceptional return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | exceptional return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | exceptional return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | functio ...  OK\\n  } | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | functio ...  OK\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | functio ...  OK\\n  } | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | functio ...  OK\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | functio ...  OK\\n  } | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | return of function sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | return of function sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | return of function sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | return of function sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:3:38:3 | return of function sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:12:36:23 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:25:36:25 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:36:28:36:28 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:7 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:7 | res | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:7 | res | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:7 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:12 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:12 | res.send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:12 | res.send | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:12 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | exceptional return of res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | exceptional return of res.send(x + y) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | exceptional return of res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | exceptional return of res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | exceptional return of res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | res.send(x + y) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | res.send(x + y) | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | res.send(x + y) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | res.send(x + y) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:5:37:19 | res.send(x + y) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:9:37:12 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:9:37:12 | send | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:9:37:12 | send | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:9:37:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:9:37:12 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:14 | x | stringConcatenatedWith |  -endpoint- y |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:14:37:18 | x + y | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:37:18:37:18 | y | stringConcatenatedWith | x -endpoint-  |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:14 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:14 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:14 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:14 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:14 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callbac ... q.url]) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callbac ... q.url]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callbac ... q.url]) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callbac ... q.url]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callbac ... q.url]) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callback | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:7:40:51 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:18 | R | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:18 | R | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:18 | R | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:18 | R | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:18 | R | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:26 | R.partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:26 | R.partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:26 | R.partial | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:26 | R.partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:26 | R.partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | R.parti ... q.url]) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | R.parti ... q.url]) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | R.parti ... q.url]) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | R.parti ... q.url]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | R.parti ... q.url]) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | exceptional return of R.parti ... q.url]) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | exceptional return of R.parti ... q.url]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | exceptional return of R.parti ... q.url]) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | exceptional return of R.parti ... q.url]) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:18:40:51 | exceptional return of R.parti ... q.url]) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:20:40:26 | partial | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:20:40:26 | partial | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:20:40:26 | partial | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:20:40:26 | partial | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:20:40:26 | partial | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | CalleeFlexibleAccessPath | R.partial |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | calleeImports | ramda |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:28:40:39 | sendResponse | receiverName | R |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | CalleeFlexibleAccessPath | R.partial |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | calleeImports | ramda |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:42:40:50 | [req.url] | receiverName | R |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:45 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:45 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:45 | req | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:45 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:45 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:43:40:49 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:40:47:40:49 | url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:40:47:40:49 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:40:47:40:49 | url | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:40:47:40:49 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:40:47:40:49 | url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:11 | [1, 2, 3] | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:11 | [1, 2, 3] | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:11 | [1, 2, 3] | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:11 | [1, 2, 3] | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:11 | [1, 2, 3] | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:19 | [1, 2, 3].forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:19 | [1, 2, 3].forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:19 | [1, 2, 3].forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:19 | [1, 2, 3].forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:19 | [1, 2, 3].forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | [1, 2,  ... llback) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | exceptional return of [1, 2,  ... llback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | exceptional return of [1, 2,  ... llback) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | exceptional return of [1, 2,  ... llback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:3:41:29 | exceptional return of [1, 2,  ... llback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:4:41:4 | 1 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:7:41:7 | 2 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:10:41:10 | 3 | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:13:41:19 | forEach | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:13:41:19 | forEach | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:13:41:19 | forEach | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:13:41:19 | forEach | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:13:41:19 | forEach | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | CalleeFlexibleAccessPath | ?.forEach |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | enclosingFunctionBody | req res sendResponse x y res send x y callback R partial sendResponse req url 1 2 3 forEach callback |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:41:21:41:28 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:3 | app | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:3 | app | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:7 | app.get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:44:7 | app.get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | app.get ... site\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | app.get ... site\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | app.get ... site\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | exceptional return of app.get ... site\\n}) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | exceptional return of app.get ... site\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:1:55:2 | exceptional return of app.get ... site\\n}) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:5:44:7 | get | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:5:44:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:5:44:7 | get | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:9:44:17 | "/return" | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | 'arguments' object of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | (req, r ...  site\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | exceptional return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | exceptional return of anonymous function | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | exceptional return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | return of anonymous function | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | return of anonymous function | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:20:55:1 | return of anonymous function | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:21:44:23 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:44:26:44:28 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:45:2 | this | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:45:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:45:2 | this | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:45:2 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:45:2 | this | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | 'arguments' object of function getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | 'arguments' object of function getFirst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | 'arguments' object of function getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | 'arguments' object of function getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | 'arguments' object of function getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | exceptional return of function getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | exceptional return of function getFirst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | exceptional return of function getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | exceptional return of function getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | exceptional return of function getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | functio ...  x;\\n  } | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | functio ...  x;\\n  } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | functio ...  x;\\n  } | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | functio ...  x;\\n  } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | functio ...  x;\\n  } | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | return of function getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | return of function getFirst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | return of function getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | return of function getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:3:47:3 | return of function getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:12:45:19 | getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:21:45:21 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:45:24:45:24 | y | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:24:45:24 | y | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:45:24:45:24 | y | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:45:24:45:24 | y | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:45:24:45:24 | y | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:46:12:46:12 | x | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:46:12:46:12 | x | contextSurroundingFunctionParameters | (x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:46:12:46:12 | x | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:46:12:46:12 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:46:12:46:12 | x | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:14 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:14 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:14 | callback | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:14 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:14 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callbac ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callbac ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callbac ... eq.url) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callbac ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callbac ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callback | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callback | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:7:49:45 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:25 | getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:25 | getFirst | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:25 | getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:25 | getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:25 | getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:30 | getFirst.bind | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:30 | getFirst.bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:30 | getFirst.bind | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:30 | getFirst.bind | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:30 | getFirst.bind | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | exceptional return of getFirs ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | exceptional return of getFirs ... eq.url) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | exceptional return of getFirs ... eq.url) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | exceptional return of getFirs ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | exceptional return of getFirs ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | getFirs ... eq.url) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | getFirs ... eq.url) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | getFirs ... eq.url) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | getFirs ... eq.url) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:18:49:45 | getFirs ... eq.url) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:27:49:30 | bind | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:27:49:30 | bind | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:27:49:30 | bind | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:27:49:30 | bind | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:27:49:30 | bind | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | CalleeFlexibleAccessPath | getFirst.bind |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:32:49:35 | null | receiverName | getFirst |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:40 | req | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:40 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:40 | req | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:40 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:40 | req | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | CalleeFlexibleAccessPath | getFirst.bind |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:49:38:49:44 | req.url | receiverName | getFirst |
| autogenerated/Xss/ReflectedXss/partial.js:49:42:49:44 | url | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:49:42:49:44 | url | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:49:42:49:44 | url | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:49:42:49:44 | url | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:49:42:49:44 | url | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:5 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:5 | res | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:5 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:10 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:10 | res.send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:10 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | exceptional return of res.send(callback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | exceptional return of res.send(callback) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | exceptional return of res.send(callback) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | exceptional return of res.send(callback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | exceptional return of res.send(callback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | res.send(callback) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | res.send(callback) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | res.send(callback) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | res.send(callback) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:3:51:20 | res.send(callback) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:7:51:10 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:7:51:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:51:7:51:10 | send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:7:51:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:7:51:10 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:51:12:51:19 | callback | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:5 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:5 | res | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:5 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:10 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:10 | res.send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:10 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | exceptional return of res.send(callback()) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | exceptional return of res.send(callback()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | exceptional return of res.send(callback()) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | exceptional return of res.send(callback()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | exceptional return of res.send(callback()) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | res.send(callback()) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | res.send(callback()) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | res.send(callback()) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | res.send(callback()) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:3:52:22 | res.send(callback()) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:7:52:10 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:7:52:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:7:52:10 | send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:7:52:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:7:52:10 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:19 | callback | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:19 | callback | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:19 | callback | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:19 | callback | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:19 | callback | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | callback() | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | exceptional return of callback() | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | exceptional return of callback() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | exceptional return of callback() | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | exceptional return of callback() | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:52:12:52:21 | exceptional return of callback() | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:5 | res | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:5 | res | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:5 | res | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:10 | res.send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:10 | res.send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:10 | res.send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | exceptional return of res.sen ... ello")) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | exceptional return of res.sen ... ello")) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | exceptional return of res.sen ... ello")) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | exceptional return of res.sen ... ello")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | exceptional return of res.sen ... ello")) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | res.sen ... ello")) | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | res.sen ... ello")) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | res.sen ... ello")) | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | res.sen ... ello")) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:3:54:29 | res.sen ... ello")) | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:7:54:10 | send | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:7:54:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:7:54:10 | send | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:7:54:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:7:54:10 | send | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:19 | getFirst | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:19 | getFirst | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:19 | getFirst | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:19 | getFirst | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:19 | getFirst | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | exceptional return of getFirst("Hello") | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | exceptional return of getFirst("Hello") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | exceptional return of getFirst("Hello") | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | exceptional return of getFirst("Hello") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | exceptional return of getFirst("Hello") | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/partial.js:54:12:54:28 | getFirst("Hello") | receiverName | res |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | CalleeFlexibleAccessPath | getFirst |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | contextFunctionInterfaces | getFirst(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y)\nsendResponse(x, y) |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | enclosingFunctionBody | req res getFirst x y x callback getFirst bind null req url res send callback res send callback res send getFirst Hello |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/partial.js:54:21:54:27 | "Hello" | fileImports | express lodash ramda underscore |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:0 | this | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:1:1:1 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:11 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:5:1:32 | express ... press') | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:21 | require | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | exceptional return of require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:15:1:32 | require('express') | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:1:23:1:31 | 'express' | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:7 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:5:2:19 | app = express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:17 | express | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | exceptional return of express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:2:11:2:19 | express() | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:3 | app | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:4:7 | app.get | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | app.get ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:1:11:2 | exceptional return of app.get ... / OK\\n}) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:5:4:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:5:4:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:5:4:7 | get | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:9:4:20 | "/some/path" | receiverName | app |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:4:23 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | (req, r ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:23:11:1 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:24:4:26 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:4:29:4:31 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | exceptional return of new Pro ... .data)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | exceptional return of new Pro ... .data)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | exceptional return of new Pro ... .data)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | exceptional return of new Pro ... .data)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | exceptional return of new Pro ... .data)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | new Pro ... .data)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | new Pro ... .data)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | new Pro ... .data)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | new Pro ... .data)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:5:59 | new Pro ... .data)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:9 | new Pro ...   .then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:9 | new Pro ...   .then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:9 | new Pro ...   .then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:9 | new Pro ...   .then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:9 | new Pro ...   .then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | exceptional return of new Pro ... end(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | exceptional return of new Pro ... end(x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | exceptional return of new Pro ... end(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | exceptional return of new Pro ... end(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | exceptional return of new Pro ... end(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | new Pro ... end(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | new Pro ... end(x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | new Pro ... end(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | new Pro ... end(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:3:6:27 | new Pro ... end(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:7:5:13 | Promise | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:7:5:13 | Promise | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:5:7:5:13 | Promise | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:7:5:13 | Promise | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:7:5:13 | Promise | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:14 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:14 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:14 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:14 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | CalleeFlexibleAccessPath | Promise |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | (resolv ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:15:5:58 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:16:5:22 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:25:5:30 | reject | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:25:5:30 | reject | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:25:5:30 | reject | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:25:5:30 | reject | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:25:5:30 | reject | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:42 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:42 | resolve | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:42 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:42 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:42 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | exceptional return of resolve ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | exceptional return of resolve ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | exceptional return of resolve ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | exceptional return of resolve ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | exceptional return of resolve ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | resolve ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | resolve ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | resolve ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | resolve ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:36:5:58 | resolve ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:46 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:46 | req | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:46 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:46 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:46 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:52 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:52 | req.query | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:52 | req.query | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:52 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:52 | req.query | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | CalleeFlexibleAccessPath | resolve |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:44:5:57 | req.query.data | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:48:5:52 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:48:5:52 | query | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:48:5:52 | query | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:48:5:52 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:48:5:52 | query | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:5:54:5:57 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:5:54:5:57 | data | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:5:54:5:57 | data | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:5:54:5:57 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:5:54:5:57 | data | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:6:6:9 | then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:6:6:9 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:6:6:6:9 | then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:6:6:9 | then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:6:6:9 | then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:10 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:10 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:10 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:10 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:10 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | CalleeFlexibleAccessPath | Promise().then |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:11:6:26 | x => res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:18 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:18 | res | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:18 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:18 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:18 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:23 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:23 | res.send | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:23 | res.send | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:23 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:23 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | exceptional return of res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | exceptional return of res.send(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | exceptional return of res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | exceptional return of res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | exceptional return of res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | res.send(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:16:6:26 | res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:20:6:23 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:20:6:23 | send | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:20:6:23 | send | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:20:6:23 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:20:6:23 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:6:25:6:25 | x | receiverName | res |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | exceptional return of new Pro ... .data)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | exceptional return of new Pro ... .data)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | exceptional return of new Pro ... .data)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | exceptional return of new Pro ... .data)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | exceptional return of new Pro ... .data)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | new Pro ... .data)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | new Pro ... .data)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | new Pro ... .data)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | new Pro ... .data)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:8:59 | new Pro ... .data)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:9 | new Pro ...   .then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:9 | new Pro ...   .then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:9 | new Pro ...   .then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:9 | new Pro ...   .then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:9 | new Pro ...   .then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | exceptional return of new Pro ... tml(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | exceptional return of new Pro ... tml(x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | exceptional return of new Pro ... tml(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | exceptional return of new Pro ... tml(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | exceptional return of new Pro ... tml(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | new Pro ... tml(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | new Pro ... tml(x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | new Pro ... tml(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | new Pro ... tml(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:9:29 | new Pro ... tml(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:9 | new Pro ...   .then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:9 | new Pro ...   .then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:9 | new Pro ...   .then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:9 | new Pro ...   .then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:9 | new Pro ...   .then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | exceptional return of new Pro ... end(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | exceptional return of new Pro ... end(x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | exceptional return of new Pro ... end(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | exceptional return of new Pro ... end(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | exceptional return of new Pro ... end(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | new Pro ... end(x)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | new Pro ... end(x)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | new Pro ... end(x)) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | new Pro ... end(x)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:3:10:27 | new Pro ... end(x)) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:7:8:13 | Promise | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:7:8:13 | Promise | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:8:7:8:13 | Promise | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:7:8:13 | Promise | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:7:8:13 | Promise | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:14 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:14 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:14 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:14 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:14 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | CalleeFlexibleAccessPath | Promise |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | (resolv ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:15:8:58 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:16:8:22 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:25:8:30 | reject | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:25:8:30 | reject | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:25:8:30 | reject | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:25:8:30 | reject | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:25:8:30 | reject | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:42 | resolve | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:42 | resolve | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:42 | resolve | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:42 | resolve | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:42 | resolve | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | exceptional return of resolve ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | exceptional return of resolve ... y.data) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | exceptional return of resolve ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | exceptional return of resolve ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | exceptional return of resolve ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | resolve ... y.data) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | resolve ... y.data) | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | resolve ... y.data) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | resolve ... y.data) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:36:8:58 | resolve ... y.data) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:46 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:46 | req | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:46 | req | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:46 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:46 | req | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:52 | req.query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:52 | req.query | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:52 | req.query | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:52 | req.query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:52 | req.query | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | CalleeFlexibleAccessPath | resolve |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:44:8:57 | req.query.data | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:48:8:52 | query | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:48:8:52 | query | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:48:8:52 | query | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:48:8:52 | query | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:48:8:52 | query | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:8:54:8:57 | data | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:8:54:8:57 | data | contextSurroundingFunctionParameters | (req, res)\n(resolve, reject) |
| autogenerated/Xss/ReflectedXss/promises.js:8:54:8:57 | data | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:8:54:8:57 | data | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:8:54:8:57 | data | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:6:9:9 | then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:6:9:9 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:9:6:9:9 | then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:6:9:9 | then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:6:9:9 | then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | CalleeFlexibleAccessPath | Promise().then |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:11:9:28 | x => escapeHtml(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:25 | escapeHtml | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:25 | escapeHtml | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:25 | escapeHtml | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:25 | escapeHtml | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:25 | escapeHtml | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | escapeHtml(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | escapeHtml(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | escapeHtml(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | escapeHtml(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | escapeHtml(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | exceptional return of escapeHtml(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | exceptional return of escapeHtml(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | exceptional return of escapeHtml(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | exceptional return of escapeHtml(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:9:16:9:28 | exceptional return of escapeHtml(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:6:10:9 | then | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:6:10:9 | then | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/promises.js:10:6:10:9 | then | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:6:10:9 | then | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:6:10:9 | then | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:10 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:10 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:10 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:10 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:10 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:11 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | 'arguments' object of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | 'arguments' object of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | exceptional return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | exceptional return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | return of anonymous function | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | return of anonymous function | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | CalleeFlexibleAccessPath | Promise().then().then |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:11:10:26 | x => res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:18 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:18 | res | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:18 | res | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:18 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:18 | res | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:23 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:23 | res.send | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:23 | res.send | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:23 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:23 | res.send | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | exceptional return of res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | exceptional return of res.send(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | exceptional return of res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | exceptional return of res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | exceptional return of res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | res.send(x) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | res.send(x) | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | res.send(x) | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | res.send(x) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:16:10:26 | res.send(x) | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:20:10:23 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:20:10:23 | send | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:20:10:23 | send | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:20:10:23 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:20:10:23 | send | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | contextSurroundingFunctionParameters | (req, res)\n(x) |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | enclosingFunctionBody | req res Promise resolve reject resolve req query data then x res send x Promise resolve reject resolve req query data then x escapeHtml x then x res send x |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | fileImports | express |
| autogenerated/Xss/ReflectedXss/promises.js:10:25:10:25 | x | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:0 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | aKnownValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | clone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | clone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | clone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | fclone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | fclone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | fclone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | jc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | serializeJavaScript | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | sortKeys | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | sortKeys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:1:1:1 | sortKeys | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:11 | express | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:5:1:32 | express ... press') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:21 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | exceptional return of require('express') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:15:1:32 | require('express') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:1:23:1:31 | 'express' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:7 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:5:3:19 | app = express() | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:17 | express | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | exceptional return of express() | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:3:11:3:19 | express() | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:5:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:1:9:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:5:5:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:5:5:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:5:5:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:9:5:19 | '/user/:id' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:5:21 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:5:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:5:21 | this | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:5:21 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:5:21 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | return of anonymous function | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:22:9:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:31:5:33 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:5:36:5:38 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:17 | { p, q: r } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:17 | { p, q: r } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:17 | { p, q: r } | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:17 | { p, q: r } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:17 | { p, q: r } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | r | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | r | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | r | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | r | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | r | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | { p, q: ... .params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | { p, q: ... .params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | { p, q: ... .params | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | { p, q: ... .params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:7:6:30 | { p, q: ... .params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:9:6:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:12 | q | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:12 | q | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:12 | q | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:12 | q | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:12 | q | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:12:6:15 | q: r | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:15:6:15 | r | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:15:6:15 | r | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:15:6:15 | r | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:15:6:15 | r | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:15:6:15 | r | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:23 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:23 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:23 | req | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:23 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:23 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:30 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:30 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:30 | req.params | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:30 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:21:6:30 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:6:25:6:30 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:6:25:6:30 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:6:25:6:30 | params | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:6:25:6:30 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:6:25:6:30 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:5 | res | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:10 | res.send | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | res.send(p) | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:3:7:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:7:7:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:7:7:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:7:7:7:10 | send | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:7:7:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:7:7:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:7:12:7:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:5 | res | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:10 | res.send | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | exceptional return of res.send(r) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | exceptional return of res.send(r) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | exceptional return of res.send(r) | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | exceptional return of res.send(r) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | exceptional return of res.send(r) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | res.send(r) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | res.send(r) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | res.send(r) | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | res.send(r) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:3:8:13 | res.send(r) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:7:8:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:7:8:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:8:7:8:10 | send | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:7:8:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:7:8:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | enclosingFunctionBody | req res p q r req params res send p res send r |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:8:12:8:12 | r | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:17 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:17 | aKnownValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:17 | aKnownValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:17 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue = "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue = "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:7:11:25 | aKnownValue = "foo" | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:11:21:11:25 | "foo" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:21:11:25 | "foo" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:11:21:11:25 | "foo" | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:13:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | app.get ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | app.get ... / OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | exceptional return of app.get ... / OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | exceptional return of app.get ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:1:24:2 | exceptional return of app.get ... / OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:5:13:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:5:13:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:5:13:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:9:13:14 | '/bar' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | aKnownValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | aKnownValue | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | aKnownValue | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | this | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:13:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | functio ... // OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | return of anonymous function | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:17:24:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:26:13:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:13:31:13:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:11 | { p } | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | { p } = req.params | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:7:14:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:9:14:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:17 | req | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:24 | req.params | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:15:14:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:14:19:14:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:14:19:14:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:14:19:14:24 | params | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:14:19:14:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:14:19:14:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:7 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:22 | p == aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:22 | p == aKnownValue | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:22 | p == aKnownValue | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:22 | p == aKnownValue | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:16:7:16:22 | p == aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:16:12:16:22 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:16:12:16:22 | aKnownValue | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:16:12:16:22 | aKnownValue | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:16:12:16:22 | aKnownValue | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:16:12:16:22 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:7 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:7 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:12 | res.send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:12 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:5:17:15 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:9:17:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:9:17:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:17:9:17:12 | send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:9:17:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:9:17:12 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:17:14:17:14 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:5 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:10 | res.send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:3:18:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:7:18:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:7:18:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:18:7:18:10 | send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:7:18:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:7:18:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:18:12:18:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:7 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:22 | p != aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:22 | p != aKnownValue | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:22 | p != aKnownValue | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:22 | p != aKnownValue | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:20:7:20:22 | p != aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:20:12:20:22 | aKnownValue | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:20:12:20:22 | aKnownValue | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:20:12:20:22 | aKnownValue | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:20:12:20:22 | aKnownValue | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:20:12:20:22 | aKnownValue | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:7 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:7 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:12 | res.send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:12 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:5:21:15 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:9:21:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:9:21:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:21:9:21:12 | send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:9:21:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:9:21:12 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:21:14:21:14 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:7 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:7 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:7 | res | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:7 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:7 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:12 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:12 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:12 | res.send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:12 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:12 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | res.send(p) | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:5:23:15 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:9:23:12 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:9:23:12 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:23:9:23:12 | send | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:9:23:12 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:9:23:12 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | enclosingFunctionBody | req res p req params p aKnownValue res send p res send p p aKnownValue res send p res send p |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:23:14:23:14 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:11 | clone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:11 | clone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:11 | clone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:11 | clone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone = ... clone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone = ... clone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:7:27:30 | clone = ... clone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:21 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | exceptional return of require('clone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | exceptional return of require('clone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | exceptional return of require('clone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | require('clone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | require('clone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:15:27:30 | require('clone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:27:23:27:29 | 'clone' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:29:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:1:38:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:5:29:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:5:29:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:5:29:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:9:29:14 | '/baz' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | clone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | clone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | clone | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | clone | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | clone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | this | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:29:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:17:38:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:26:29:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:29:31:29:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:11 | { p } | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | { p } = req.params | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:7:30:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:9:30:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:17 | req | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:24 | req.params | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:15:30:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:30:19:30:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:30:19:30:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:30:19:30:24 | params | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:30:19:30:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:30:19:30:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:9 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:9 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:9 | obj | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:9 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:9 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj = {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj = {} | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj = {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:32:7:32:14 | obj = {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:32:13:32:14 | {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:32:13:32:14 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:32:13:32:14 | {} | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:32:13:32:14 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:32:13:32:14 | {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:5 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:5 | obj | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:5 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:5 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:7 | obj.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:7 | obj.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:7 | obj.p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:7 | obj.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:7 | obj.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:11 | obj.p = p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:11 | obj.p = p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:11 | obj.p = p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:11 | obj.p = p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:33:3:33:11 | obj.p = p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:33:7:33:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:33:7:33:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:33:7:33:7 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:7:33:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:33:7:33:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | assignedToPropName | p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:33:11:33:11 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:11 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:11 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:11 | other | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:11 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:11 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other = clone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other = clone(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other = clone(obj) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other = clone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:7:34:24 | other = clone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:19 | clone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:19 | clone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:19 | clone | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:19 | clone | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:19 | clone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | clone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | clone(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | clone(obj) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | clone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | clone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | exceptional return of clone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | exceptional return of clone(obj) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | exceptional return of clone(obj) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | exceptional return of clone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:15:34:24 | exceptional return of clone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | CalleeFlexibleAccessPath | clone |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | calleeImports | clone |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:34:21:34:23 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:5 | res | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:3:36:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:7:36:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:7:36:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:36:7:36:10 | send | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:7:36:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:7:36:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:36:12:36:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:5 | res | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | exceptional return of res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | exceptional return of res.send(other.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | exceptional return of res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | exceptional return of res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | exceptional return of res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | res.send(other.p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:3:37:19 | res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:7:37:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:7:37:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:7:37:10 | send | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:7:37:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:7:37:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:16 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:16 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:16 | other | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:16 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:16 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:37:12:37:18 | other.p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:37:18:37:18 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:37:18:37:18 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:37:18:37:18 | p | enclosingFunctionBody | req res p req params obj obj p p other clone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:37:18:37:18 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:37:18:37:18 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:25 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:25 | serializeJavaScript | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:25 | serializeJavaScript | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:25 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | seriali ... cript') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | seriali ... cript') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | seriali ... cript') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | serializeJavaScript | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:7:40:59 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:35 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:35 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:35 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | exceptional return of require ... cript') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | exceptional return of require ... cript') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | exceptional return of require ... cript') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | require ... cript') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | require ... cript') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:29:40:59 | require ... cript') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:40:37:40:58 | 'serial ... script' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:42:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:1:52:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:5:42:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:5:42:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:5:42:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:9:42:14 | '/baz' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | serializeJavaScript | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | serializeJavaScript | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | serializeJavaScript | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | this | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:42:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | return of anonymous function | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:17:52:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:26:42:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:42:31:42:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:11 | { p } | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | { p } = req.params | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:7:43:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:9:43:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:17 | req | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:24 | req.params | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:15:43:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:43:19:43:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:43:19:43:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:43:19:43:24 | params | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:43:19:43:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:43:19:43:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:16 | serialized | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:16 | serialized | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:16 | serialized | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:16 | serialized | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:16 | serialized | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | seriali ... ript(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | seriali ... ript(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | seriali ... ript(p) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | seriali ... ript(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | seriali ... ript(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | serialized | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | serialized | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | serialized | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | serialized | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:7:45:41 | serialized | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:38 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:38 | serializeJavaScript | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:38 | serializeJavaScript | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:38 | serializeJavaScript | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:38 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | exceptional return of seriali ... ript(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | exceptional return of seriali ... ript(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | exceptional return of seriali ... ript(p) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | exceptional return of seriali ... ript(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | exceptional return of seriali ... ript(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | seriali ... ript(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | seriali ... ript(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | seriali ... ript(p) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | seriali ... ript(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:20:45:41 | seriali ... ript(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | CalleeFlexibleAccessPath | serializeJavaScript |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | calleeImports | serialize-javascript |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:45:40:45:40 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:5 | res | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:10 | res.send | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | exceptional return of res.send(serialized) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | exceptional return of res.send(serialized) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | exceptional return of res.send(serialized) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | exceptional return of res.send(serialized) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | exceptional return of res.send(serialized) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | res.send(serialized) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | res.send(serialized) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | res.send(serialized) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | res.send(serialized) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:3:47:22 | res.send(serialized) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:7:47:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:7:47:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:47:7:47:10 | send | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:7:47:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:7:47:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:47:12:47:21 | serialized | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:12 | unsafe | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:12 | unsafe | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:12 | unsafe | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:12 | unsafe | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:12 | unsafe | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe  ...  true}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe  ...  true}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe  ...  true}) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe  ...  true}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:7:49:53 | unsafe  ...  true}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:34 | serializeJavaScript | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:34 | serializeJavaScript | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:34 | serializeJavaScript | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:34 | serializeJavaScript | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:34 | serializeJavaScript | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | exceptional return of seriali ...  true}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | exceptional return of seriali ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | exceptional return of seriali ...  true}) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | exceptional return of seriali ...  true}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | exceptional return of seriali ...  true}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | seriali ...  true}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | seriali ...  true}) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | seriali ...  true}) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | seriali ...  true}) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:16:49:53 | seriali ...  true}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | CalleeFlexibleAccessPath | serializeJavaScript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | calleeImports | serialize-javascript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:36:49:36 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | CalleeFlexibleAccessPath | serializeJavaScript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | calleeImports | serialize-javascript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:39:49:52 | {unsafe: true} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:45 | unsafe | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:45 | unsafe | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:45 | unsafe | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:45 | unsafe | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:45 | unsafe | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:40:49:51 | unsafe: true | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | CalleeFlexibleAccessPath | serializeJavaScript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | InputAccessPathFromCallee | 1.unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | assignedToPropName | unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | calleeImports | serialize-javascript |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:49:48:49:51 | true | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:5 | res | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:10 | res.send | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | exceptional return of res.send(unsafe) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | exceptional return of res.send(unsafe) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | exceptional return of res.send(unsafe) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | exceptional return of res.send(unsafe) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | exceptional return of res.send(unsafe) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | res.send(unsafe) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | res.send(unsafe) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | res.send(unsafe) | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | res.send(unsafe) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:3:51:18 | res.send(unsafe) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:7:51:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:7:51:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:51:7:51:10 | send | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:7:51:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:7:51:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | enclosingFunctionBody | req res p req params serialized serializeJavaScript p res send serialized unsafe serializeJavaScript p unsafe true res send unsafe |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:51:12:51:17 | unsafe | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:12 | fclone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:12 | fclone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:12 | fclone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:12 | fclone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone  ... clone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone  ... clone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:7:54:32 | fclone  ... clone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:22 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:22 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:22 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | exceptional return of require('fclone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | exceptional return of require('fclone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | exceptional return of require('fclone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | require('fclone') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | require('fclone') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:16:54:32 | require('fclone') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:54:24:54:31 | 'fclone' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:56:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:1:65:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:5:56:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:5:56:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:5:56:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:9:56:14 | '/baz' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | fclone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | fclone | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | fclone | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | fclone | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | fclone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | this | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:56:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:17:65:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:26:56:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:56:31:56:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:11 | { p } | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | { p } = req.params | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:7:57:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:9:57:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:17 | req | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:24 | req.params | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:15:57:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:57:19:57:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:57:19:57:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:57:19:57:24 | params | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:57:19:57:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:57:19:57:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:9 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:9 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:9 | obj | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:9 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:9 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj = {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj = {} | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj = {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:59:7:59:14 | obj = {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:59:13:59:14 | {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:59:13:59:14 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:59:13:59:14 | {} | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:59:13:59:14 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:59:13:59:14 | {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:5 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:5 | obj | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:5 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:5 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:7 | obj.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:7 | obj.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:7 | obj.p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:7 | obj.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:7 | obj.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:11 | obj.p = p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:11 | obj.p = p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:11 | obj.p = p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:11 | obj.p = p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:60:3:60:11 | obj.p = p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:60:7:60:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:60:7:60:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:60:7:60:7 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:7:60:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:60:7:60:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | assignedToPropName | p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:60:11:60:11 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:11 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:11 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:11 | other | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:11 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:11 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other = fclone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other = fclone(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other = fclone(obj) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other = fclone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:7:61:25 | other = fclone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:20 | fclone | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:20 | fclone | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:20 | fclone | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:20 | fclone | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:20 | fclone | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | exceptional return of fclone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | exceptional return of fclone(obj) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | exceptional return of fclone(obj) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | exceptional return of fclone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | exceptional return of fclone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | fclone(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | fclone(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | fclone(obj) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | fclone(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:15:61:25 | fclone(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | CalleeFlexibleAccessPath | fclone |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | calleeImports | fclone |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:61:22:61:24 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:5 | res | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:3:63:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:7:63:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:7:63:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:63:7:63:10 | send | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:7:63:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:7:63:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:63:12:63:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:5 | res | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | exceptional return of res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | exceptional return of res.send(other.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | exceptional return of res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | exceptional return of res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | exceptional return of res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | res.send(other.p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:3:64:19 | res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:7:64:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:7:64:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:7:64:10 | send | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:7:64:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:7:64:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:16 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:16 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:16 | other | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:16 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:16 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:64:12:64:18 | other.p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:64:18:64:18 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:64:18:64:18 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:64:18:64:18 | p | enclosingFunctionBody | req res p req params obj obj p p other fclone obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:64:18:64:18 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:64:18:64:18 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:8 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:8 | jc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:8 | jc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:8 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc = re ... cycle') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc = re ... cycle') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:7:67:32 | jc = re ... cycle') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:18 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:18 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | exceptional return of require ... cycle') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | exceptional return of require ... cycle') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | exceptional return of require ... cycle') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | require ... cycle') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | require ... cycle') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:12:67:32 | require ... cycle') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:67:20:67:31 | 'json-cycle' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:68:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:1:77:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:5:68:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:5:68:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:5:68:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:9:68:14 | '/baz' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | jc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | jc | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | jc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | this | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:68:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:17:77:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:26:68:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:68:31:68:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:11 | { p } | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | { p } = req.params | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:7:69:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:9:69:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:17 | req | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:24 | req.params | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:15:69:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:69:19:69:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:69:19:69:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:69:19:69:24 | params | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:69:19:69:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:69:19:69:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:9 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:9 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:9 | obj | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:9 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:9 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj = {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj = {} | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj = {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:71:7:71:14 | obj = {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:71:13:71:14 | {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:71:13:71:14 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:71:13:71:14 | {} | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:71:13:71:14 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:71:13:71:14 | {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:5 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:5 | obj | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:5 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:5 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:7 | obj.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:7 | obj.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:7 | obj.p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:7 | obj.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:7 | obj.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:11 | obj.p = p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:11 | obj.p = p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:11 | obj.p = p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:11 | obj.p = p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:72:3:72:11 | obj.p = p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:72:7:72:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:72:7:72:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:72:7:72:7 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:7:72:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:72:7:72:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | assignedToPropName | p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:72:11:72:11 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:11 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:11 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:11 | other | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:11 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:11 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other = ... e(obj)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other = ... e(obj)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other = ... e(obj)) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other = ... e(obj)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:7:73:44 | other = ... e(obj)) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:16 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:16 | jc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:16 | jc | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:16 | jc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:16 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:27 | jc.retrocycle | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:27 | jc.retrocycle | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:27 | jc.retrocycle | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:27 | jc.retrocycle | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:27 | jc.retrocycle | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | exceptional return of jc.retr ... e(obj)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | exceptional return of jc.retr ... e(obj)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | exceptional return of jc.retr ... e(obj)) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | exceptional return of jc.retr ... e(obj)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | exceptional return of jc.retr ... e(obj)) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | jc.retr ... e(obj)) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | jc.retr ... e(obj)) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | jc.retr ... e(obj)) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | jc.retr ... e(obj)) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:15:73:44 | jc.retr ... e(obj)) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:18:73:27 | retrocycle | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:18:73:27 | retrocycle | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:18:73:27 | retrocycle | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:18:73:27 | retrocycle | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:18:73:27 | retrocycle | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:30 | jc | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:30 | jc | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:30 | jc | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:30 | jc | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:30 | jc | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:38 | jc.decycle | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:38 | jc.decycle | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:38 | jc.decycle | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:38 | jc.decycle | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:38 | jc.decycle | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | exceptional return of jc.decycle(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | exceptional return of jc.decycle(obj) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | exceptional return of jc.decycle(obj) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | exceptional return of jc.decycle(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | exceptional return of jc.decycle(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | CalleeFlexibleAccessPath | jc.retrocycle |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | calleeImports | json-cycle |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:29:73:43 | jc.decycle(obj) | receiverName | jc |
| autogenerated/Xss/ReflectedXss/tst2.js:73:32:73:38 | decycle | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:32:73:38 | decycle | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:32:73:38 | decycle | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:32:73:38 | decycle | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:32:73:38 | decycle | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | CalleeFlexibleAccessPath | jc.decycle |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | calleeImports | json-cycle |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:73:40:73:42 | obj | receiverName | jc |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:5 | res | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:3:75:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:7:75:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:7:75:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:75:7:75:10 | send | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:7:75:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:7:75:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:75:12:75:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:5 | res | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | exceptional return of res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | exceptional return of res.send(other.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | exceptional return of res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | exceptional return of res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | exceptional return of res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | res.send(other.p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:3:76:19 | res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:7:76:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:7:76:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:7:76:10 | send | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:7:76:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:7:76:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:16 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:16 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:16 | other | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:16 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:16 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:76:12:76:18 | other.p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:76:18:76:18 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:76:18:76:18 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:76:18:76:18 | p | enclosingFunctionBody | req res p req params obj obj p p other jc retrocycle jc decycle obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:76:18:76:18 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:76:18:76:18 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:14 | sortKeys | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:14 | sortKeys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:14 | sortKeys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:14 | sortKeys | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKey ... -keys') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKey ... -keys') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKey ... -keys') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKeys | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKeys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:7:79:37 | sortKeys | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:24 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:24 | require | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | exceptional return of require('sort-keys') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | exceptional return of require('sort-keys') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | exceptional return of require('sort-keys') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | require('sort-keys') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | require('sort-keys') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:18:79:37 | require('sort-keys') | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:79:26:79:36 | 'sort-keys' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:3 | app | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:7 | app.get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:81:7 | app.get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | exceptional return of app.get ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | exceptional return of app.get ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:1:90:2 | exceptional return of app.get ... T OK\\n}) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:5:81:7 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:5:81:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:5:81:7 | get | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:9:81:14 | '/baz' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | sortKeys | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | sortKeys | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | sortKeys | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | sortKeys | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | sortKeys | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | this | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:81:16 | this | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | 'arguments' object of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | exceptional return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | return of anonymous function | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:17:90:1 | return of anonymous function | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:26:81:28 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:81:31:81:33 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:11 | { p } | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:11 | { p } | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:11 | { p } | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | { p } = req.params | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | { p } = req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:7:82:24 | { p } = req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:9:82:9 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:17 | req | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:17 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:17 | req | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:24 | req.params | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:24 | req.params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:15:82:24 | req.params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:82:19:82:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:82:19:82:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:82:19:82:24 | params | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:82:19:82:24 | params | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:82:19:82:24 | params | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:9 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:9 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:9 | obj | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:9 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:9 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj = {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj = {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj = {} | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj = {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:84:7:84:14 | obj = {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:84:13:84:14 | {} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:84:13:84:14 | {} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:84:13:84:14 | {} | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:84:13:84:14 | {} | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:84:13:84:14 | {} | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:5 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:5 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:5 | obj | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:5 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:5 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:7 | obj.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:7 | obj.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:7 | obj.p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:7 | obj.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:7 | obj.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:11 | obj.p = p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:11 | obj.p = p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:11 | obj.p = p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:11 | obj.p = p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:85:3:85:11 | obj.p = p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:85:7:85:7 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:85:7:85:7 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:85:7:85:7 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:7:85:7 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:85:7:85:7 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | assignedToPropName | p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:85:11:85:11 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:11 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:11 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:11 | other | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:11 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:11 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other = ... ys(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other = ... ys(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other = ... ys(obj) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other = ... ys(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:7:86:27 | other = ... ys(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:22 | sortKeys | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:22 | sortKeys | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:22 | sortKeys | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:22 | sortKeys | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:22 | sortKeys | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | exceptional return of sortKeys(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | exceptional return of sortKeys(obj) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | exceptional return of sortKeys(obj) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | exceptional return of sortKeys(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | exceptional return of sortKeys(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | sortKeys(obj) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | sortKeys(obj) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | sortKeys(obj) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | sortKeys(obj) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:15:86:27 | sortKeys(obj) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | CalleeFlexibleAccessPath | sortKeys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | calleeImports | sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:86:24:86:26 | obj | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:5 | res | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | exceptional return of res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | exceptional return of res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | res.send(p) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | res.send(p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:3:88:13 | res.send(p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:7:88:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:7:88:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:88:7:88:10 | send | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:7:88:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:7:88:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:88:12:88:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:5 | res | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:5 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:5 | res | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:10 | res.send | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:10 | res.send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:10 | res.send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | exceptional return of res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | exceptional return of res.send(other.p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | exceptional return of res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | exceptional return of res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | exceptional return of res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | res.send(other.p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | res.send(other.p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | res.send(other.p) | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | res.send(other.p) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:3:89:19 | res.send(other.p) | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:7:89:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:7:89:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:7:89:10 | send | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:7:89:10 | send | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:7:89:10 | send | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:16 | other | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:16 | other | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:16 | other | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:16 | other | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:16 | other | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst2.js:89:12:89:18 | other.p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst2.js:89:18:89:18 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst2.js:89:18:89:18 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst2.js:89:18:89:18 | p | enclosingFunctionBody | req res p req params obj obj p p other sortKeys obj res send p res send other p |
| autogenerated/Xss/ReflectedXss/tst2.js:89:18:89:18 | p | enclosingFunctionName | app.get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst2.js:89:18:89:18 | p | fileImports | clone express fclone json-cycle serialize-javascript sort-keys |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:0 | this | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | prettier | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | prettier | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:1:1:1 | require | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:11 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:11 | express | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:5:1:32 | express ... press') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:21 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:21 | require | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | exceptional return of require('express') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:15:1:32 | require('express') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:1:23:1:31 | 'express' | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:7 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:7 | app | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app = express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:5:3:19 | app = express() | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:17 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:17 | express | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | exceptional return of express() | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:3:11:3:19 | express() | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:3 | app | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:10 | app.enable | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:10 | app.enable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:10 | app.enable | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | app.ena ... ed-by') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | app.ena ... ed-by') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | app.ena ... ed-by') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | exceptional return of app.ena ... ed-by') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | exceptional return of app.ena ... ed-by') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:26 | exceptional return of app.ena ... ed-by') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:34 | app.ena ... disable | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:34 | app.ena ... disable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:34 | app.ena ... disable | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | app.ena ... ed-by') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | app.ena ... ed-by') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | app.ena ... ed-by') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | exceptional return of app.ena ... ed-by') | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | exceptional return of app.ena ... ed-by') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:50 | exceptional return of app.ena ... ed-by') | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:54 | app.ena ... y').get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:54 | app.ena ... y').get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:4:54 | app.ena ... y').get | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | app.ena ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | app.ena ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | app.ena ... T OK\\n}) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | exceptional return of app.ena ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | exceptional return of app.ena ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:1:7:2 | exceptional return of app.ena ... T OK\\n}) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:5:4:10 | enable | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:5:4:10 | enable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:5:4:10 | enable | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | CalleeFlexibleAccessPath | app.enable |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:12:4:25 | 'x-powered-by' | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst3.js:4:28:4:34 | disable | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:28:4:34 | disable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:28:4:34 | disable | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | CalleeFlexibleAccessPath | app.enable().disable |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:36:4:49 | 'x-powered-by' | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:52:4:54 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:52:4:54 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:52:4:54 | get | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | CalleeFlexibleAccessPath | app.enable().disable().get |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:56:4:58 | '/' | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:4:60 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:4:60 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:4:60 | this | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:4:60 | this | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:4:60 | this | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | 'arguments' object of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | exceptional return of anonymous function | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | exceptional return of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.enable().disable().get |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | functio ... OT OK\\n} | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | return of anonymous function | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:61:7:1 | return of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:71:4:73 | req | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:4:76:4:78 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:11 | { p } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:11 | { p } | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:11 | { p } | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:11 | { p } | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:11 | { p } | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | { p } = req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | { p } = req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | { p } = req.params | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | { p } = req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:7:5:24 | { p } = req.params | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:9:5:9 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:17 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:17 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:17 | req | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:17 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:17 | req | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:24 | req.params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:24 | req.params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:24 | req.params | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:24 | req.params | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:15:5:24 | req.params | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:5:19:5:24 | params | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:5:19:5:24 | params | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:5:19:5:24 | params | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:5:19:5:24 | params | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:5:19:5:24 | params | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:5 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:5 | res | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:5 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:5 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:10 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:10 | res.send | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:10 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:10 | res.send | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | exceptional return of res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | exceptional return of res.send(p) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | exceptional return of res.send(p) | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | exceptional return of res.send(p) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | exceptional return of res.send(p) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | res.send(p) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | res.send(p) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | res.send(p) | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | res.send(p) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:3:6:13 | res.send(p) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:7:6:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:7:6:10 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:6:7:6:10 | send | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:7:6:10 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:7:6:10 | send | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | enclosingFunctionBody | req res p req params res send p |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:6:12:6:12 | p | receiverName | res |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:14 | prettier | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:14 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:14 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:14 | prettier | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettie ... ttier") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettie ... ttier") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettie ... ttier") | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettier | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:7:9:36 | prettier | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:24 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:24 | require | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | exceptional return of require("prettier") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | exceptional return of require("prettier") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | exceptional return of require("prettier") | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | require("prettier") | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | require("prettier") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:18:9:36 | require("prettier") | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | calleeImports |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:9:26:9:35 | "prettier" | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:3 | app | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:3 | app | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:8 | app.post | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:8 | app.post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:10:8 | app.post | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | app.pos ... T OK\\n}) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | exceptional return of app.pos ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | exceptional return of app.pos ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:1:13:2 | exceptional return of app.pos ... T OK\\n}) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:5:10:8 | post | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:5:10:8 | post | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:5:10:8 | post | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:10:10:17 | "foobar" | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | prettier | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | prettier | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | prettier | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | prettier | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | prettier | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | this | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | this | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:10:19 | this | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | 'arguments' object of anonymous function | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | 'arguments' object of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | exceptional return of anonymous function | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | exceptional return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | exceptional return of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | app.post |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | functio ... OT OK\\n} | receiverName | app |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | return of anonymous function | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | return of anonymous function | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:20:13:1 | return of anonymous function | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:30:10:32 | reg | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:10:35:10:37 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:12 | code | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:12 | code | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:12 | code | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:12 | code | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:12 | code | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code =  ... bel" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code =  ... bel" }) | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code =  ... bel" }) | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code =  ... bel" }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:9:11:74 | code =  ... bel" }) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:23 | prettier | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:23 | prettier | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:23 | prettier | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:23 | prettier | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:23 | prettier | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:30 | prettier.format | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:30 | prettier.format | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:30 | prettier.format | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:30 | prettier.format | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:30 | prettier.format | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | exceptional return of prettie ... bel" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | exceptional return of prettie ... bel" }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | exceptional return of prettie ... bel" }) | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | exceptional return of prettie ... bel" }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | exceptional return of prettie ... bel" }) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | prettie ... bel" }) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | prettie ... bel" }) | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | prettie ... bel" }) | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | prettie ... bel" }) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:16:11:74 | prettie ... bel" }) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:25:11:30 | format | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:25:11:30 | format | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:25:11:30 | format | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:25:11:30 | format | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:25:11:30 | format | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:34 | reg | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:34 | reg | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:34 | reg | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:34 | reg | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:34 | reg | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | calleeImports | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:32:11:39 | reg.body | receiverName | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:36:11:39 | body | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:36:11:39 | body | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:36:11:39 | body | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:36:11:39 | body | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:36:11:39 | body | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | calleeImports | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:42:11:73 | { semi: ... abel" } | receiverName | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:47 | semi | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:47 | semi | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:47 | semi | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:47 | semi | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:47 | semi | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:44:11:54 | semi: false | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | InputAccessPathFromCallee | 1.semi |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | assignedToPropName | semi |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | calleeImports | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:50:11:54 | false | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:62 | parser | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:62 | parser | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:62 | parser | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:62 | parser | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:62 | parser | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:57:11:71 | parser: "babel" | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | CalleeFlexibleAccessPath | prettier.format |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | InputAccessPathFromCallee | 1.parser |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | InputArgumentIndex | 1 |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | assignedToPropName | parser |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | calleeImports | prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:11:65:11:71 | "babel" | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:5 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:5 | res | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:5 | res | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:5 | res | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:5 | res | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:10 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:10 | res.send | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:10 | res.send | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:10 | res.send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:10 | res.send | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | exceptional return of res.send(code) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | exceptional return of res.send(code) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | exceptional return of res.send(code) | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | exceptional return of res.send(code) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | exceptional return of res.send(code) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | res.send(code) | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | res.send(code) | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | res.send(code) | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | res.send(code) | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:3:12:16 | res.send(code) | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:7:12:10 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:7:12:10 | send | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:12:7:12:10 | send | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:7:12:10 | send | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:7:12:10 | send | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | InputArgumentIndex | 0 |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | contextFunctionInterfaces |  |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | contextSurroundingFunctionParameters | (reg, res) |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | enclosingFunctionBody | reg res code prettier format reg body semi false parser babel res send code |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | enclosingFunctionName | app.post#functionalargument |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | fileImports | express prettier |
| autogenerated/Xss/ReflectedXss/tst3.js:12:12:12:15 | code | receiverName | res |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:0 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:0 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | require | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:1:1:1 | require | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:8 | http | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:8 | http | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:8 | http | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http =  ... 'http') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http =  ... 'http') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:5:1:26 | http =  ... 'http') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:18 | require | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:18 | require | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | exceptional return of require('http') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | exceptional return of require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | exceptional return of require('http') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | require('http') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | require('http') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:12:1:26 | require('http') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | calleeImports |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:1:20:1:25 | 'http' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:6 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:6 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:6 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs = require('fs') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs = require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:5:2:22 | fs = require('fs') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:16 | require | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:16 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:16 | require | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | exceptional return of require('fs') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | exceptional return of require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | exceptional return of require('fs') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | require('fs') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | require('fs') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:10:2:22 | require('fs') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | calleeImports |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:2:18:2:21 | 'fs' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:11 | express | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:11 | express | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express ... press') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:5:4:32 | express ... press') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:21 | require | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:21 | require | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | exceptional return of require('express') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | exceptional return of require('express') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | require('express') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:15:4:32 | require('express') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | calleeImports |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:4:23:4:31 | 'express' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:7 | express | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:7 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:7 | express | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | exceptional return of express() | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | exceptional return of express() | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | express() | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:9 | express() | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:13 | express().get | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:13 | express().get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:6:13 | express().get | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | exceptional return of express ...  });\\n}) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | exceptional return of express ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | exceptional return of express ...  });\\n}) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | express ...  });\\n}) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | express ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:1:10:2 | express ...  });\\n}) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:11:6:13 | get | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:11:6:13 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:11:6:13 | get | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | calleeImports | express |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:15:6:17 | '/' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | fs | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | fs | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | this | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | this | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:19 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:20 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:20 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:20 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:20 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:6:20 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | exceptional return of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | calleeImports | express |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | functio ...   });\\n} | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | return of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:20:10:1 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:29:6:31 | req | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:29:6:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:29:6:31 | req | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:29:6:31 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:29:6:31 | req | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:6:34:6:36 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:6 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:6 | fs | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:6 | fs | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:6 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:14 | fs.readdir | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:14 | fs.readdir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:14 | fs.readdir | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:14 | fs.readdir | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:7:14 | fs.readdir | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | exceptional return of fs.read ... \\n    }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | exceptional return of fs.read ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | exceptional return of fs.read ... \\n    }) | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | exceptional return of fs.read ... \\n    }) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | exceptional return of fs.read ... \\n    }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | fs.read ... \\n    }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | fs.read ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | fs.read ... \\n    }) | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | fs.read ... \\n    }) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:5:9:6 | fs.read ... \\n    }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:8:7:14 | readdir | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:8:7:14 | readdir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:8:7:14 | readdir | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:8:7:14 | readdir | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:8:7:14 | readdir | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | CalleeFlexibleAccessPath | fs.readdir |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | calleeImports | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:16:7:23 | "/myDir" | receiverName | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | this | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | this | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:7:25 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | exceptional return of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | fs.readdir |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | calleeImports | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | functio ... K\\n    } | receiverName | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | return of anonymous function | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:26:9:5 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:36:7:40 | error | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:36:7:40 | error | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:36:7:40 | error | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:36:7:40 | error | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:36:7:40 | error | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:7:43:7:48 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:11 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:11 | res | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:11 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:11 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:16 | res.send | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:16 | res.send | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:16 | res.send | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:16 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:16 | res.send | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | exceptional return of res.send(files1) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | exceptional return of res.send(files1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | exceptional return of res.send(files1) | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | exceptional return of res.send(files1) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | exceptional return of res.send(files1) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | res.send(files1) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | res.send(files1) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | res.send(files1) | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | res.send(files1) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:9:8:24 | res.send(files1) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:13:8:16 | send | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:13:8:16 | send | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:13:8:16 | send | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:13:8:16 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:13:8:16 | send | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | enclosingFunctionBody | req res fs readdir /myDir error files1 res send files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:8:18:8:23 | files1 | receiverName | res |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:4 | http | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:4 | http | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:4 | http | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:17 | http.createServer | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:17 | http.createServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:15:17 | http.createServer | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | exceptional return of http.cr ...  });\\n}) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | exceptional return of http.cr ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | exceptional return of http.cr ...  });\\n}) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | http.cr ...  });\\n}) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | http.cr ...  });\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:1:40:2 | http.cr ...  });\\n}) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:6:15:17 | createServer | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:6:15:17 | createServer | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:6:15:17 | createServer | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | fs | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | fs | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:18 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:15:19 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | CalleeFlexibleAccessPath | http.createServer |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | calleeImports | http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | functio ...   });\\n} | receiverName | http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:19:40:1 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:29:15:31 | req | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:29:15:31 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:29:15:31 | req | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:29:15:31 | req | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:29:15:31 | req | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:15:34:15:36 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:4 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:4 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:4 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:4 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:4 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:5 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:5 | files3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:5 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:5 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:17:5 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | 'arguments' object of function format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | 'arguments' object of function format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | 'arguments' object of function format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | 'arguments' object of function format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | 'arguments' object of function format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | exceptional return of function format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | exceptional return of function format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | exceptional return of function format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | exceptional return of function format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | exceptional return of function format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | functio ... ;\\n    } | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | functio ... ;\\n    } | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | functio ... ;\\n    } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | functio ... ;\\n    } | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | return of function format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | return of function format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | return of function format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | return of function format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:5:23:5 | return of function format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:14:17:19 | format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:17:21:17:26 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:18 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 = [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 = [] | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 = [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:13:18:23 | files3 = [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:18:22:18:23 | [] | stringConcatenatedWith |  -endpoint-  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:14 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:14 | files2 | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:14 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:14 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:14 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:19 | files2.sort | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:19 | files2.sort | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:19 | files2.sort | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:19 | files2.sort | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:19 | files2.sort | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | exceptional return of files2.sort(sort) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | exceptional return of files2.sort(sort) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | exceptional return of files2.sort(sort) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | exceptional return of files2.sort(sort) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | exceptional return of files2.sort(sort) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | files2.sort(sort) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | files2.sort(sort) | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | files2.sort(sort) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | files2.sort(sort) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:25 | files2.sort(sort) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:33 | files2. ... forEach | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:33 | files2. ... forEach | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:33 | files2. ... forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:33 | files2. ... forEach | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:19:33 | files2. ... forEach | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | exceptional return of files2. ...      }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | exceptional return of files2. ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | exceptional return of files2. ...      }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | exceptional return of files2. ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | exceptional return of files2. ...      }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | files2. ...      }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | files2. ...      }) | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | files2. ...      }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | files2. ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:9:21:10 | files2. ...      }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:16:19:19 | sort | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:16:19:19 | sort | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:16:19:19 | sort | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:16:19:19 | sort | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:16:19:19 | sort | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | CalleeFlexibleAccessPath | files2.sort |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:21:19:24 | sort | receiverName | files2 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:27:19:33 | forEach | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:27:19:33 | forEach | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:27:19:33 | forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:27:19:33 | forEach | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:27:19:33 | forEach | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | files3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:19:34 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | CalleeFlexibleAccessPath | files2.sort().forEach |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | functio ...       } | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:35:21:9 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:19:45:19:48 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:18 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:18 | files3 | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:18 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:18 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:18 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:23 | files3.push | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:23 | files3.push | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:23 | files3.push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:23 | files3.push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:23 | files3.push | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... </li>') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... </li>') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... </li>') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... </li>') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | exceptional return of files3. ... </li>') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... </li>') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... </li>') | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... </li>') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... </li>') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:13:20:48 | files3. ... </li>') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:20:20:23 | push | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:30 | '<li>' | stringConcatenatedWith |  -endpoint- file + '</li>' |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:37 | '<li>' + file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:37 | '<li>' + file | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:37 | '<li>' + file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:37 | '<li>' + file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:37 | '<li>' + file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | CalleeFlexibleAccessPath | files3.push |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:25:20:47 | '<li>'  ... '</li>' | receiverName | files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:34:20:37 | file | stringConcatenatedWith | '<li>' -endpoint- '</li>' |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | contextSurroundingFunctionParameters | (files2)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:20:41:20:47 | '</li>' | stringConcatenatedWith | '<li>' + file -endpoint-  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:21 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:26 | files3.join | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | exceptional return of files3.join('') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:16:22:30 | files3.join('') | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:23:22:26 | join | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | CalleeFlexibleAccessPath | files3.join |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | contextSurroundingFunctionParameters | (files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:22:28:22:29 | '' | receiverName | files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:6 | fs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:25:14 | fs.readdir | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n    }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n    }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n    }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | exceptional return of fs.read ... \\n    }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n    }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n    }) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n    }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n    }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:5:39:6 | fs.read ... \\n    }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:8:25:14 | readdir | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | CalleeFlexibleAccessPath | fs.readdir |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | calleeImports | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:16:25:23 | "/myDir" | receiverName | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:25 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:25:26 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | CalleeFlexibleAccessPath | fs.readdir |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | calleeImports | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | functio ... \\n\\n    } | receiverName | fs |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:26:39:5 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:36:25:40 | error | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:25:43:25:48 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:11 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:17 | res.write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | exceptional return of res.write(files1) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:9:26:25 | res.write(files1) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:13:26:17 | write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | CalleeFlexibleAccessPath | res.write |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:26:19:26:24 | files1 | receiverName | res |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:16 | dirs | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:13:28:21 | dirs = [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:28:20:28:21 | [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:18 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:13:29:23 | files2 = [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:29:22:29:23 | [] | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:14 | files1 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:30:22 | files1.forEach | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ...      }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ...      }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ...      }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | exceptional return of files1. ...      }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ...      }) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ...      }) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ...      }) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ...      }) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:9:32:10 | files1. ...      }) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:16:30:22 | forEach | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:30:23 | this | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | 'arguments' object of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | exceptional return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | CalleeFlexibleAccessPath | files1.forEach |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | functio ...       } | receiverName | files1 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:24:32:9 | return of anonymous function | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:30:34:30:37 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:18 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:23 | files2.push | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | exceptional return of files2.push(file) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:13:31:29 | files2.push(file) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:20:31:23 | push | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | CalleeFlexibleAccessPath | files2.push |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | contextSurroundingFunctionParameters | (req, res)\n(error, files1)\n(file) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:31:25:31:28 | file | receiverName | files2 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:11 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:17 | res.write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | exceptional return of res.write(files2) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:9:33:25 | res.write(files2) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:13:33:17 | write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | CalleeFlexibleAccessPath | res.write |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:33:19:33:24 | files2 | receiverName | res |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:18 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3  ... files2) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3  ... files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3  ... files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3  ... files2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:13:35:35 | files3  ... files2) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:27 | format | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | exceptional return of format(files2) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:22:35:35 | format(files2) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | CalleeFlexibleAccessPath | format |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:35:29:35:34 | files2 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:11 | res | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:17 | res.write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | exceptional return of res.write(files3) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:9:37:25 | res.write(files3) | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:13:37:17 | write | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | CalleeFlexibleAccessPath | res.write |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | contextFunctionInterfaces | format(files2) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | contextSurroundingFunctionParameters | (req, res)\n(error, files1) |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | enclosingFunctionBody | req res format files2 files3 files2 sort sort forEach file files3 push <li> file </li> files3 join  fs readdir /myDir error files1 res write files1 dirs files2 files1 forEach file files2 push file res write files2 files3 format files2 res write files3 |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | enclosingFunctionName | http.createServer#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | fileImports | express fs http |
| autogenerated/Xss/StoredXss/xss-through-filenames.js:37:19:37:24 | files3 | receiverName | res |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:0 | this | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | parseTorrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:1:1:1 | require | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:18 | parseTorrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTo ... rrent') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:7:1:45 | parseTorrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:28 | require | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | exceptional return of require ... rrent') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:22:1:45 | require ... rrent') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | calleeImports |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:1:30:1:44 | 'parse-torrent' | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:13 | express | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:7:2:34 | express ... press') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:23 | require | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | exceptional return of require('express') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:17:2:34 | require('express') | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | calleeImports |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:2:25:2:33 | 'express' | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:7 | express | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | exceptional return of express() | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:9 | express() | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:4:13 | express().get | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | exceptional return of express ... T OK\\n}) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:1:8:2 | express ... T OK\\n}) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:11:4:13 | get | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | calleeImports | express |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:15:4:25 | '/user/:id' | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | parseTorrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:4:27 | this | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | 'arguments' object of anonymous function | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | exceptional return of anonymous function | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | CalleeFlexibleAccessPath | express().get |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | InputArgumentIndex | 1 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | calleeImports | express |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | functio ... OT OK\\n} | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:28:8:1 | return of anonymous function | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:37:4:39 | req | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:4:42:4:44 | res | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:12 | torrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:6:5:36 | torrent ... nknown) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:27 | parseTorrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | exceptional return of parseTo ... nknown) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:16:5:36 | parseTo ... nknown) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | CalleeFlexibleAccessPath | parseTorrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | calleeImports | parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:5:29:5:35 | unknown | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:9 | name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:6:6:24 | name = torrent.name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:19 | torrent | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:13:6:24 | torrent.name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:6:21:6:24 | name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:4 | res | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:9 | res.send | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | exceptional return of res.send(name) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:2:7:15 | res.send(name) | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:6:7:9 | send | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | CalleeFlexibleAccessPath | res.send |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | InputArgumentIndex | 0 |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | contextFunctionInterfaces |  |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | enclosingFunctionBody | req res torrent parseTorrent unknown name torrent name res send name |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | enclosingFunctionName | get#functionalargument |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | fileImports | express parse-torrent |
| autogenerated/Xss/StoredXss/xss-through-torrent.js:7:11:7:14 | name | receiverName | res |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:1:0 | this | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ...  OK\\n})) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ...  OK\\n})) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:1:9:3 | (functi ...  OK\\n})) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:1:1 | this | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | functio ... );\\n\\t}\\n} | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:7:1 | return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | exceptional return of functio ... / OK\\n}) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:2:9:2 | functio ... / OK\\n}) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:1:12:1:18 | factory | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:18 | typeof define | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof  ... nction' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof  ... nction' | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof  ... nction' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof  ... nction' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:33 | typeof  ... nction' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof  ... ine.amd | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof  ... ine.amd | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof  ... ine.amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof  ... ine.amd | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:6:2:47 | typeof  ... ine.amd | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:13:2:18 | define | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:24:2:33 | 'function' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:43 | define | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:38:2:47 | define.amd | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:2:45:2:47 | amd | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:8 | define | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | define( ... actory) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:3:3:42 | exceptional return of define( ... actory) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | CalleeFlexibleAccessPath | define |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:10:3:32 | ['jquer ... ry-ui'] | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:11:3:18 | 'jquery' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:21:3:31 | 'jquery-ui' | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | CalleeFlexibleAccessPath | define |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:3:35:3:41 | factory | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:9 | factory | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | exceptional return of factory(jQuery) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:3:5:17 | factory(jQuery) | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | CalleeFlexibleAccessPath | factory |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | contextSurroundingFunctionParameters | (factory) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | enclosingFunctionBody | factory define function define amd define jquery jquery-ui factory factory jQuery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:5:11:5:16 | jQuery | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:7:2 | this | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | functio ... // OK\\n} | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:3:9:1 | return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:7:13:7:13 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:5 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("<spa ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("<spa ... span>") | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("<spa ... span>") | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("<spa ... span>") | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | $("<spa ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("<spa ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("<spa ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("<spa ... span>") | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("<spa ... span>") | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:5:8:43 | exceptional return of $("<spa ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:14 | "<span>" | stringConcatenatedWith |  -endpoint- $.trim() + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | "<span> ... ("foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | "<span> ... ("foo") | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | "<span> ... ("foo") | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | "<span> ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:30 | "<span> ... ("foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | calleeImports | jquery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:7:8:42 | "<span> ... /span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:18 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:23 | $.trim | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | $.trim("foo") | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:18:8:30 | exceptional return of $.trim("foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:20:8:23 | trim | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | CalleeFlexibleAccessPath | $.trim |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | calleeImports | jquery |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:25:8:29 | "foo" | receiverName | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | contextSurroundingFunctionParameters | ($) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | enclosingFunctionBody | $ $ <span> $ trim foo </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:8:34:8:42 | "</span>" | stringConcatenatedWith | '<span>' + $.trim() -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:1 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:4 | $.fn | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:11:13 | $.fn.myPlugin | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:1:15:1 | $.fn.my ... OT OK\\n} | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:3:11:4 | fn | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:6:11:13 | myPlugin | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:11:16 | this | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | 'arguments' object of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | exceptional return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | assignedToPropName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | functio ... OT OK\\n} | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:17:15:1 | return of anonymous function | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:27:11:31 | stuff | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:11:34:11:40 | options | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:5 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | $("#foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:13 | exceptional return of $("#foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:18 | $("#foo").html | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | $("#foo ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:5:12:54 | exceptional return of $("#foo ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:7:12:12 | "#foo" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:15:12:18 | html | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:27 | "<span>" | stringConcatenatedWith |  -endpoint- options.foo + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | "<span> ... ons.foo | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | "<span> ... ons.foo | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | "<span> ... ons.foo | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | "<span> ... ons.foo | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:41 | "<span> ... ons.foo | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:20:12:53 | "<span> ... /span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:37 | options | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:31:12:41 | options.foo | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:39:12:41 | foo | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:12:45:12:53 | "</span>" | stringConcatenatedWith | '<span>' + options.foo -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:5 | $ | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | $("#foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:13 | exceptional return of $("#foo") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:18 | $("#foo").html | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | $("#foo ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:5:14:48 | exceptional return of $("#foo ... span>") | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:7:14:12 | "#foo" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:15:14:18 | html | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:27 | "<span>" | stringConcatenatedWith |  -endpoint- stuff + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "<span>" + stuff | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "<span>" + stuff | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "<span>" + stuff | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "<span>" + stuff | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:35 | "<span>" + stuff | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:20:14:47 | "<span> ... /span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:31:14:35 | stuff | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | contextFunctionInterfaces | myPlugin(stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | contextSurroundingFunctionParameters | (stuff, options) |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | enclosingFunctionBody | stuff options $ #foo html <span> options foo </span> $ #foo html <span> stuff </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | enclosingFunctionName | myPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | fileImports | jquery jquery-ui |
| autogenerated/Xss/UnsafeHtmlConstruction/jquery-plugin.js:14:39:14:47 | "</span>" | stringConcatenatedWith | '<span>' + stuff -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:1:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | functio ... html;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:8:4:1 | return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:17:1:26 | trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:14 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html =  ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html =  ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:11:2:41 | html =  ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "<span>" + s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "<span>" + s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "<span>" + s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:29 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | "<span> ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:18:2:41 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:29:2:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:2:33:2:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:26 | documen ... elector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:45 | documen ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ...  = html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ...  = html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ...  = html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:5:3:52 | documen ...  = html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:14:3:26 | querySelector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:28:3:34 | "#html" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:37:3:45 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/index.ts:3:49:3:52 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:1:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:8:4:1 | return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:17:1:26 | trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:14 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "<span>" + s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "<span>" + s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "<span>" + s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:29 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:29:2:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:2:33:2:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:26 | documen ... elector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ...  = html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ...  = html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ...  = html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:5:3:52 | documen ...  = html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:14:3:26 | querySelector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:28:3:34 | "#html" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:37:3:45 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib2/src/MyNode.ts:3:49:3:52 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:1:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | 'arguments' object of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | exceptional return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | functio ... html;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:8:4:1 | return of function trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:17:1:26 | trivialXss | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:1:28:1:28 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:14 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:11:2:41 | html =  ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "<span>" + s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "<span>" + s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "<span>" + s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:29 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:18:2:41 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:29:2:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:2:33:2:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:26 | documen ... elector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:35 | exceptional return of documen ... #html") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:45 | documen ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ...  = html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ...  = html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ...  = html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:5:3:52 | documen ...  = html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:14:3:26 | querySelector | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:28:3:34 | "#html" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:37:3:45 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | contextFunctionInterfaces | trivialXss(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | enclosingFunctionName | trivialXss |
| autogenerated/Xss/UnsafeHtmlConstruction/lib/src/MyNode.ts:3:49:3:52 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:0 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:1 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:1:41 | module. ... ruction | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:1:4:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:8:1:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:16:1:41 | xssThro ... ruction | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:1:44 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | assignedToPropName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:45:4:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:1:55:1:55 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html =  ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html =  ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html =  ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html =  ... /span>" | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:11:2:41 | html =  ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "<span>" + s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "<span>" + s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "<span>" + s | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:29 | "<span>" + s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | "<span> ... /span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | "<span> ... /span>" | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:18:2:41 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:29:2:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:2:33:2:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | documen ... #html") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:35 | exceptional return of documen ... #html") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:45 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ...  = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ...  = html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ...  = html | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:5:3:52 | documen ...  = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:14:3:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:28:3:34 | "#html" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:37:3:45 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | enclosingFunctionBody | s html <span> s </span> document querySelector #html innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | enclosingFunctionName | xssThroughHTMLConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:3:49:3:52 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:6:35 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:1:9:1 | module. ... ent);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:8:6:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:16:6:35 | xssThroughXMLParsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:6:38 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | assignedToPropName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | functio ... ent);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:39:9:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:6:49:6:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:11:7:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:17:7:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:21:7:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:33:7:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:49:7:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:7:52:7:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:34 | exceptional return of documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:46 | documen ... ndChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | documen ... lement) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:5:8:67 | exceptional return of documen ... lement) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:14:8:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:28:8:33 | "#xml" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:36:8:46 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:50 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | CalleeFlexibleAccessPath | document.querySelector().appendChild |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:48:8:66 | doc.documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml document querySelector #xml appendChild doc documentElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | enclosingFunctionName | xssThroughXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:8:52:8:66 | documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:11:46 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:1:18:1 | module. ... tmp);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:8:11:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:16:11:46 | xssThro ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:11:49 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | assignedToPropName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | functio ... tmp);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:50:18:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:11:60:11:60 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:11:12:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:17:12:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:21:12:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:33:12:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:49:12:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:12:52:12:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:13 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:11:13:35 | xml = d ... Element | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:19 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:17:13:35 | doc.documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:13:21:13:35 | documentElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:13 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:11:15:46 | tmp = d ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:24 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:38 | documen ... Element | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | documen ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:17:15:46 | exceptional return of documen ... 'span') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:26:15:38 | createElement | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:15:40:15:45 | 'span' | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:7 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:19 | tmp.appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | exceptional return of tmp.app ... Node()) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:5:16:36 | tmp.app ... Node()) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:9:16:19 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:23 | xml | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:33 | xml.cloneNode | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | exceptional return of xml.cloneNode() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | CalleeFlexibleAccessPath | tmp.appendChild |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:21:16:35 | xml.cloneNode() | receiverName | tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:16:25:16:33 | cloneNode | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:34 | exceptional return of documen ... "#xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:46 | documen ... ndChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | documen ... ld(tmp) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:5:17:51 | exceptional return of documen ... ld(tmp) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:14:17:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:28:17:33 | "#xml" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:36:17:46 | appendChild | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | CalleeFlexibleAccessPath | document.querySelector().appendChild |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml xml doc documentElement tmp document createElement span tmp appendChild xml cloneNode document querySelector #xml appendChild tmp |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | enclosingFunctionName | xssThroughMoreComplexXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:17:48:17:50 | tmp | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:14 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ...  true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdow ...  true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:7:20:53 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:24 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | exceptional return of require ... wn-it') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:39 | require ... wn-it') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ...  true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | exceptional return of require ...  true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ...  true}) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ...  true}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:18:20:53 | require ...  true}) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | calleeImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:26:20:38 | 'markdown-it' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | calleeImports | markdown-it |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:41:20:52 | {html: true} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:45 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:42:20:51 | html: true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | CalleeFlexibleAccessPath | import(!) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | InputAccessPathFromCallee | 0.html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | assignedToPropName | html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | calleeImports | markdown-it |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:20:48:20:51 | true | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:21:33 | module. ... arkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:1:24:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:8:21:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:16:21:33 | xssThroughMarkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:21:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | assignedToPropName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:37:24:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:21:47:21:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html =  ... nder(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html =  ... nder(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html =  ... nder(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html =  ... nder(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:11:22:35 | html =  ... nder(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:25 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:32 | markdown.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | exceptional return of markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:18:22:35 | markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:27:22:32 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | CalleeFlexibleAccessPath | markdown.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | calleeImports | markdown-it |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:22:34:22:34 | s | receiverName | markdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:39 | exceptional return of documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ...  = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ...  = html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ...  = html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:5:23:56 | documen ...  = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:14:23:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:28:23:38 | "#markdown" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:41:23:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:23:53:23:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:15 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | stripta ... ptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:7:26:38 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:25 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | exceptional return of require('striptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:19:26:38 | require('striptags') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | calleeImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:26:27:26:37 | 'striptags' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:27:28 | module. ... zedHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:1:30:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:8:27:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:16:27:28 | sanitizedHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:27:31 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | assignedToPropName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:32:30:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:27:42:27:42 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html =  ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html =  ... span>") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html =  ... span>") | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html =  ... span>") | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:11:28:52 | html =  ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:26 | striptags | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | exceptional return of stripta ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:18:28:52 | stripta ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:35 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "<span>" + s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "<span>" + s | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "<span>" + s | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:28:28:39 | "<span>" + s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:39:28:39 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:28:43:28:51 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | documen ... tized") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:40 | exceptional return of documen ... tized") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:50 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ...  = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ...  = html | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ...  = html | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:5:29:57 | documen ...  = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:14:29:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:28:29:39 | "#sanitized" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:42:29:50 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | enclosingFunctionBody | s html striptags <span> s </span> document querySelector #sanitized innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | enclosingFunctionName | sanitizedHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:29:54:29:57 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:17 | module.exports.ts | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:1:32:38 | module. ... typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:8:32:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:16:32:17 | ts | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:27 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | exceptional return of require("./typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | assignedToPropName | ts |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:21:32:38 | require("./typed") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | calleeImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:32:29:32:37 | "./typed" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:21 | module. ... .jquery | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:1:34:50 | module. ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:8:34:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:16:34:21 | jquery | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:31 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | exceptional return of require ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | assignedToPropName | jquery |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:25:34:50 | require ... lugin") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | calleeImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:34:33:34:49 | "./jquery-plugin" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:36:33 | module. ... Parsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ...  DOM.\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ...  DOM.\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:1:38:1 | module. ...  DOM.\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:8:36:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:16:36:33 | plainDOMXMLParsing | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:36:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ...  DOM.\\n} | assignedToPropName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ...  DOM.\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ...  DOM.\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | functio ...  DOM.\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:37:38:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:36:47:36:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:13 | doc | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:11:37:62 | doc = n ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | exceptional return of new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:31 | new DOMParser() | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:47 | new DOM ... mString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | exceptional return of new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:17:37:62 | new DOM ... t/xml") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:21:37:29 | DOMParser | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:33:37:47 | parseFromString | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:49:37:49 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | CalleeFlexibleAccessPath | DOMParser().parseFromString |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | enclosingFunctionBody | s doc DOMParser parseFromString s text/xml |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | enclosingFunctionName | plainDOMXMLParsing |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:37:52:37:61 | "text/xml" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ...    }\\n\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ...    }\\n\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:1:50:1 | class F ...    }\\n\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:40:7:40:9 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:41:15 | constructor | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:5:43:5 | constru ... ;\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:41:15 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | 'arguments' object of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n  ... ;\\n    } | assignedToPropName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n  ... ;\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n  ... ;\\n    } | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | (s) {\\n  ... ;\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | exceptional return of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:16:43:5 | return of constructor of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:41:17:41:17 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:12 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:17 | this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:9:42:21 | this.step = s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:14:42:17 | step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | assignedToPropName | step |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | enclosingFunctionBody | s step s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | enclosingFunctionName | constructor |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:42:21:42:21 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:45:9 | doXss | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:5:48:5 | doXss() ... K\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:45:9 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | 'arguments' object of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n   ... K\\n    } | assignedToPropName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n   ... K\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n   ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | () {\\n   ... K\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | exceptional return of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:45:10:48:5 | return of method doXss of class Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:16 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:30 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | documen ... class") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:40 | exceptional return of documen ... class") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:50 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:9:47:85 | documen ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:18:47:30 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:32:47:39 | "#class" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:42:47:50 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:61 | "<span>" | stringConcatenatedWith |  -endpoint- this.step + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "<span>" + this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "<span>" + this.step | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "<span>" + this.step | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "<span>" + this.step | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:73 | "<span>" + this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:54:47:85 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:68 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:65:47:73 | this.step | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:70:47:73 | step | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | enclosingFunctionBody | document querySelector #class innerHTML <span> step </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | enclosingFunctionName | doXss |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:47:77:47:85 | "</span>" | stringConcatenatedWith | '<span>' + this.step -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:52:27 | module. ... esClass | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:1:54:1 | module. ... o(s);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:8:52:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:16:52:27 | createsClass | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:52:30 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | assignedToPropName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | functio ... o(s);\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:31:54:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:52:41:52:41 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | exceptional return of new Foo(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:12:53:21 | new Foo(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:16:53:18 | Foo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | CalleeFlexibleAccessPath | Foo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | enclosingFunctionBody | s Foo s |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | enclosingFunctionName | createsClass |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:53:20:53:20 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:1 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:4 | $.fn | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:56:14 | $.fn.xssPlugin | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ...   });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ...   });\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:1:64:1 | $.fn.xs ...   });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:3:56:4 | fn | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:6:56:14 | xssPlugin | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:17 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:56:18 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ...   });\\n} | assignedToPropName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ...   });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | functio ...   });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:18:64:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:56:28:56:34 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:57:18 | defaults | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n    } | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n    } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n    } | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | default ... "\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:11:59:5 | defaults | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n      ... "\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n      ... "\\n    } | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n      ... "\\n    } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n      ... "\\n    } | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:57:22:59:5 | {\\n      ... "\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:12 | name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:9:58:20 | name: "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | assignedToPropName | name |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:58:15:58:20 | "name" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:18 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | setting ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:11:60:48 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:22 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:29 | $.extend | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | $.exten ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:22:60:48 | exceptional return of $.exten ... ptions) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:24:60:29 | extend | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:31:60:38 | defaults | receiverName | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:60:41:60:47 | options | receiverName | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:15 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:61:20 | this.each | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n    }) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n    }) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | exceptional return of this.ea ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n    }) | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n    }) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n    }) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:12:63:6 | this.ea ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | contextSurroundingFunctionParameters | (options) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:17:61:20 | each | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:61:21 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | CalleeFlexibleAccessPath | this.each |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | functio ... K\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:61:22:63:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("<b>" ... "</b>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("<b>" ... "</b>") | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("<b>" ... "</b>") | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("<b>" ... "</b>") | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | $("<b>" ... "</b>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("<b>" ... "</b>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("<b>" ... "</b>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("<b>" ... "</b>") | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("<b>" ... "</b>") | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:41 | exceptional return of $("<b>" ... "</b>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("<b>" ... ppendTo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("<b>" ... ppendTo | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("<b>" ... ppendTo | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("<b>" ... ppendTo | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:50 | $("<b>" ... ppendTo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("<b>" ... o(this) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("<b>" ... o(this) | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("<b>" ... o(this) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("<b>" ... o(this) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | $("<b>" ... o(this) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("<b>" ... o(this) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("<b>" ... o(this) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("<b>" ... o(this) | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("<b>" ... o(this) | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:9:62:56 | exceptional return of $("<b>" ... o(this) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:15 | "<b>" | stringConcatenatedWith |  -endpoint- settings.name + '</b>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "<b>" + ... gs.name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "<b>" + ... gs.name | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "<b>" + ... gs.name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "<b>" + ... gs.name | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:31 | "<b>" + ... gs.name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:11:62:40 | "<b>" + ...  "</b>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:26 | settings | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:19:62:31 | settings.name | stringConcatenatedWith | '<b>' -endpoint- '</b>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:28:62:31 | name | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:35:62:40 | "</b>" | stringConcatenatedWith | '<b>' + settings.name -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:43:62:50 | appendTo | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | contextSurroundingFunctionParameters | (options)\n() |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | enclosingFunctionBody | options defaults name name settings $ extend defaults options each $ <b> settings name </b> appendTo |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | enclosingFunctionName | xssPlugin |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:62:52:62:55 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:66:21 | module. ... .guards | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ...     }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:1:72:1 | module. ...     }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:8:66:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:16:66:21 | guards | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:66:24 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ...     }\\n} | assignedToPropName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ...     }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | functio ...     }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:25:72:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:66:35:66:41 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:33 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:43 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:5:67:78 | documen ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:14:67:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:28:67:32 | "#id" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:35:67:43 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:59 | "<img alt=\\"" | stringConcatenatedWith |  -endpoint- attrVal + '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "<img a ... attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "<img a ... attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "<img a ... attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "<img a ... attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:69 | "<img a ... attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:47:67:78 | "<img a ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:63:67:69 | attrVal | stringConcatenatedWith | '<img alt="' -endpoint- '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:67:73:67:78 | "\\"/>" | stringConcatenatedWith | '<img alt="' + attrVal -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:33 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:43 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:5:68:98 | documen ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:14:68:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:28:68:32 | "#id" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:35:68:43 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:59 | "<img alt=\\"" | stringConcatenatedWith |  -endpoint- attrVal.replace() + '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "<img a ... /g, "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "<img a ... /g, "") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "<img a ... /g, "") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "<img a ... /g, "") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:89 | "<img a ... /g, "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:47:68:98 | "<img a ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:69 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:77 | attrVal.replace | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | attrVal ... /g, "") | stringConcatenatedWith | '<img alt="' -endpoint- '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:63:68:89 | exceptional return of attrVal ... /g, "") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:71:68:77 | replace | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | CalleeFlexibleAccessPath | attrVal.replace |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:79:68:84 | /"\|'/g | receiverName | attrVal |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | CalleeFlexibleAccessPath | attrVal.replace |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:87:68:88 | "" | receiverName | attrVal |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:68:93:68:98 | "\\"/>" | stringConcatenatedWith | '<img alt="' + attrVal.replace() -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:15 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | attrVal ... f("\\"") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:29 | exceptional return of attrVal ... f("\\"") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ...  === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ...  === -1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ...  === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ...  === -1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:36 | attrVal ...  === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ...  === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ...  === -1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ...  === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ...  === -1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:9:69:67 | attrVal ...  === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:17:69:23 | indexOf | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | CalleeFlexibleAccessPath | attrVal.indexOf |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:25:69:28 | "\\"" | receiverName | attrVal |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:35:69:36 | -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:36:69:36 | 1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:47 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | attrVal.indexOf("'") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:60 | exceptional return of attrVal.indexOf("'") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ...  === -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ...  === -1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ...  === -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ...  === -1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:41:69:67 | attrVal ...  === -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:49:69:55 | indexOf | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | CalleeFlexibleAccessPath | attrVal.indexOf |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:57:69:59 | "'" | receiverName | attrVal |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:66:69:67 | -1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:69:67:69:67 | 1 | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:16 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:30 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:37 | exceptional return of documen ... ("#id") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:47 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:9:70:82 | documen ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:18:70:30 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:32:70:36 | "#id" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:39:70:47 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:63 | "<img alt=\\"" | stringConcatenatedWith |  -endpoint- attrVal + '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "<img a ... attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "<img a ... attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "<img a ... attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "<img a ... attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:73 | "<img a ... attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:51:70:82 | "<img a ...  "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:67:70:73 | attrVal | stringConcatenatedWith | '<img alt="' -endpoint- '"/>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | contextSurroundingFunctionParameters | (attrVal) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | enclosingFunctionBody | attrVal document querySelector #id innerHTML <img alt=" attrVal "/> document querySelector #id innerHTML <img alt=" attrVal replace /"\|'/g  "/> attrVal indexOf " 1 attrVal indexOf ' 1 document querySelector #id innerHTML <img alt=" attrVal "/> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | enclosingFunctionName | guards |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:70:77:70:82 | "\\"/>" | stringConcatenatedWith | '<img alt="' + attrVal -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:74:34 | module. ... emplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:1:77:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:8:74:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:16:74:34 | intentionalTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:74:37 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | assignedToPropName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:38:77:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:74:48:74:50 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:11:75:56 | html =  ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:25 | "<span>" | stringConcatenatedWith |  -endpoint- obj.spanTemplate + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | "<span> ... emplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | "<span> ... emplate | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | "<span> ... emplate | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | "<span> ... emplate | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:44 | "<span> ... emplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | "<span> ... /span>" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | "<span> ... /span>" | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | "<span> ... /span>" | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:18:75:56 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:31 | obj | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:29:75:44 | obj.spanTemplate | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:33:75:44 | spanTemplate | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:75:48:75:56 | "</span>" | stringConcatenatedWith | '<span>' + obj.spanTemplate -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | documen ... plate") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:39 | exceptional return of documen ... plate") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ...  = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ...  = html | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ...  = html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ...  = html | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:5:76:56 | documen ...  = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:14:76:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:28:76:38 | "#template" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:41:76:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | contextSurroundingFunctionParameters | (obj) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | enclosingFunctionBody | obj html <span> obj spanTemplate </span> document querySelector #template innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | enclosingFunctionName | intentionalTemplate |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:76:53:76:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:79:20 | module.exports.types | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ...     }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:1:87:1 | module. ...     }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:8:79:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:16:79:20 | types | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:79:23 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ...     }\\n} | assignedToPropName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ...     }\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | functio ...     }\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:24:87:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:79:34:79:36 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:18 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof  ... string" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof  ... string" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof  ... string" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof  ... string" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | typeof  ... string" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:9:80:31 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:16:80:18 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:80:24:80:31 | "string" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:9:81:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:11:81:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:19:81:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:31 | "<span>" | stringConcatenatedWith |  -endpoint- val + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "<span>" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "<span>" + val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "<span>" + val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "<span>" + val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:37 | "<span>" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:24:81:49 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:35:81:37 | val | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:81:41:81:49 | "</span>" | stringConcatenatedWith | '<span>' + val -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:25 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof  ... number" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof  ... number" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof  ... number" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof  ... number" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | typeof  ... number" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:16:82:38 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:23:82:25 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:82:31:82:38 | "number" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:9:83:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:11:83:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:19:83:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:31 | "<span>" | stringConcatenatedWith |  -endpoint- val + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "<span>" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "<span>" + val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "<span>" + val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "<span>" + val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:37 | "<span>" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:24:83:49 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:35:83:37 | val | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:83:41:83:49 | "</span>" | stringConcatenatedWith | '<span>' + val -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:25 | typeof val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof  ... oolean" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof  ... oolean" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof  ... oolean" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof  ... oolean" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | typeof  ... oolean" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:16:84:39 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:23:84:25 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:84:31:84:39 | "boolean" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:9:85:50 | exceptional return of $("#foo ... span>") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:11:85:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:19:85:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:31 | "<span>" | stringConcatenatedWith |  -endpoint- val + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "<span>" + val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "<span>" + val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "<span>" + val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "<span>" + val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:37 | "<span>" + val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:24:85:49 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:35:85:37 | val | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | contextSurroundingFunctionParameters | (val) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | enclosingFunctionBody | val val string $ #foo html <span> val </span> val number $ #foo html <span> val </span> val boolean $ #foo html <span> val </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | enclosingFunctionName | types |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:85:41:85:49 | "</span>" | stringConcatenatedWith | '<span>' + val -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:89:0 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | 'arguments' object of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | exceptional return of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | functio ... OT OK\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:1:91:1 | return of function createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:10:89:19 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:89:21:89:21 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:19 | "<span>" | stringConcatenatedWith |  -endpoint- x + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "<span>" + x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "<span>" + x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "<span>" + x | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "<span>" + x | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:23 | "<span>" + x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | "<span> ... /span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | "<span> ... /span>" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | "<span> ... /span>" | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | "<span> ... /span>" | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:12:90:35 | "<span> ... /span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:23:90:23 | x | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | enclosingFunctionBody | x <span> x </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | enclosingFunctionName | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:90:27:90:35 | "</span>" | stringConcatenatedWith | '<span>' + x -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:93:29 | module. ... ateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:1:95:1 | module. ... (x));\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:8:93:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:16:93:29 | usesCreateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:93:32 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | assignedToPropName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | functio ... (x));\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:33:95:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:93:43:93:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | $("#foo ... TML(x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:5:94:33 | exceptional return of $("#foo ... TML(x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:7:94:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:15:94:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:29 | createHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | createHTML(x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:20:94:32 | exceptional return of createHTML(x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | CalleeFlexibleAccessPath | createHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | enclosingFunctionBody | x $ #foo html createHTML x |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:94:31:94:31 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:15 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMerma ... rmaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:7:97:36 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:25 | require | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | exceptional return of require('mermaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:19:97:36 | require('mermaid') | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | calleeImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:97:27:97:35 | 'mermaid' | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:98:29 | module. ... ateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ...   });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ...   });\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:1:114:1 | module. ...   });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:8:98:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:16:98:29 | usesCreateHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:98:32 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ...   });\\n} | assignedToPropName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ...   });\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ...   });\\n} | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | functio ...   });\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:33:114:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:98:43:98:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:13 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:99:20 | myMermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | exceptional return of myMerma ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n    }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:5:101:6 | myMerma ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:15:99:20 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | CalleeFlexibleAccessPath | myMermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | calleeImports | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:22:99:25 | "id" | receiverName | myMermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | CalleeFlexibleAccessPath | myMermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | calleeImports | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:28:99:28 | x | receiverName | myMermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:99:30 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | myMermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | InputArgumentIndex | 2 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | calleeImports | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | functio ... ;\\n    } | receiverName | myMermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:31:101:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:99:41:99:43 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:9:100:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:11:100:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:19:100:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:100:24:100:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:5:103:45 | exceptional return of $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:7:103:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:15:103:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:28 | myMermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:35 | myMermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | exceptional return of myMerma ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:20:103:44 | myMerma ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:30:103:35 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | CalleeFlexibleAccessPath | myMermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | calleeImports | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:37:103:40 | "id" | receiverName | myMermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | CalleeFlexibleAccessPath | myMermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | calleeImports | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:103:43:103:43 | x | receiverName | myMermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:11 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:105:18 | mermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | exceptional return of mermaid ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n    }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:5:107:6 | mermaid ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:13:105:18 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | CalleeFlexibleAccessPath | mermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:20:105:23 | "id" | receiverName | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | CalleeFlexibleAccessPath | mermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:26:105:26 | x | receiverName | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:105:28 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | CalleeFlexibleAccessPath | mermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | InputArgumentIndex | 2 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | functio ...  \\n    } | receiverName | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:29:107:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:105:39:105:41 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:9:106:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:11:106:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:19:106:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:106:24:106:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:5 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:13 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:18 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:5:109:43 | exceptional return of $("#foo ... d", x)) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:7:109:12 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:15:109:18 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:26 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:33 | mermaid.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | exceptional return of mermaid ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:20:109:42 | mermaid ... id", x) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:28:109:33 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | CalleeFlexibleAccessPath | mermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:35:109:38 | "id" | receiverName | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | CalleeFlexibleAccessPath | mermaid.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:109:41:109:41 | x | receiverName | mermaid |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:11 | mermaid | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:22 | mermaid.mermaidAPI | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:111:29 | mermaid ... .render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | exceptional return of mermaid ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n    }) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n    }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n    }) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n    }) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:5:113:6 | mermaid ... \\n    }) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:13:111:22 | mermaidAPI | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:24:111:29 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | CalleeFlexibleAccessPath | mermaid.mermaidAPI.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:31:111:34 | "id" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | CalleeFlexibleAccessPath | mermaid.mermaidAPI.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:37:111:37 | x | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:111:39 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | CalleeFlexibleAccessPath | mermaid.mermaidAPI.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | InputArgumentIndex | 2 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | functio ... ;\\n    } | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:40:113:5 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:111:50:111:52 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:9 | $ | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:17 | exceptional return of $("#foo") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:22 | $("#foo").html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:9:112:27 | exceptional return of $("#foo").html(svg) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:11:112:16 | "#foo" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:19:112:22 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | contextSurroundingFunctionParameters | (x)\n(svg) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | enclosingFunctionBody | x myMermaid render id x svg $ #foo html svg $ #foo html myMermaid render id x mermaid render id x svg $ #foo html svg $ #foo html mermaid render id x mermaid mermaidAPI render id x svg $ #foo html svg |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | enclosingFunctionName | usesCreateHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:112:24:112:26 | svg | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:6 | module | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:14 | module.exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:116:33 | module. ... arkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:1:119:1 | module. ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:8:116:14 | exports | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:16:116:33 | xssThroughMarkdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:116:36 | this | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | 'arguments' object of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | exceptional return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | assignedToPropName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | functio ... html;\\n} | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:37:119:1 | return of anonymous function | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:116:47:116:47 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:14 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html =  ... nder(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html =  ... nder(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html =  ... nder(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html =  ... nder(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:11:117:35 | html =  ... nder(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:25 | markdown | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:32 | markdown.render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | exceptional return of markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:18:117:35 | markdown.render(s) | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:27:117:32 | render | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | CalleeFlexibleAccessPath | markdown.render |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | calleeImports | markdown-it |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:117:34:117:34 | s | receiverName | markdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:12 | document | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:26 | documen ... elector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:39 | exceptional return of documen ... kdown") | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:49 | documen ... nerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ...  = html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ...  = html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ...  = html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:5:118:56 | documen ...  = html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:14:118:26 | querySelector | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:28:118:38 | "#markdown" | receiverName | document |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:41:118:49 | innerHTML | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | contextFunctionInterfaces | constructor(s)\ncreateHTML(x)\ncreatesClass(s)\ndoXss()\nguards(attrVal)\nintentionalTemplate(obj)\nplainDOMXMLParsing(s)\nsanitizedHTML(s)\ntypes(val)\nusesCreateHTML(x)\nusesCreateHTML(x)\nxssPlugin(options)\nxssThroughHTMLConstruction(s)\nxssThroughMarkdown(s)\nxssThroughMarkdown(s)\nxssThroughMoreComplexXMLParsing(s)\nxssThroughXMLParsing(s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | enclosingFunctionBody | s html markdown render s document querySelector #markdown innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | enclosingFunctionName | xssThroughMarkdown |
| autogenerated/Xss/UnsafeHtmlConstruction/main.js:118:53:118:56 | html | fileImports | ./jquery-plugin ./typed markdown-it mermaid striptags |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:1:1:1 | id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:1:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | 'arguments' object of function basicHtmlConstruction | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | exceptional return of function basicHtmlConstruction | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | functio ... html;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:8:4:1 | return of function basicHtmlConstruction | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:17:1:37 | basicHt ... ruction | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:1:39:1:39 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:14 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html =  ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html =  ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html =  ... /span>" | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:11:2:41 | html =  ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "<span>" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "<span>" + s | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "<span>" + s | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:29 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | "<span> ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | "<span> ... /span>" | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:18:2:41 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:29:2:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:2:33:2:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:17 | document.body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:27 | documen ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ...  = html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ...  = html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ...  = html | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ...  = html | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:5:3:34 | documen ...  = html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:14:3:17 | body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:19:3:27 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | enclosingFunctionBody | s html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | enclosingFunctionName | basicHtmlConstruction |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:3:31:3:34 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:6:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | 'arguments' object of function insertIntoCreatedDocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | exceptional return of function insertIntoCreatedDocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | functio ... ENCY]\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:8:9:1 | return of function insertIntoCreatedDocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:17:6:41 | insertI ... ocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:6:43:6:43 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:16 | newDoc | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc  ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc  ... ent("") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc  ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc  ... ent("") | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:11:7:65 | newDoc  ... ent("") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:27 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:42 | documen ... ntation | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:61 | documen ... ocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | documen ... ent("") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:20:7:65 | exceptional return of documen ... ent("") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:29:7:42 | implementation | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:44:7:61 | createHTMLDocument | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | CalleeFlexibleAccessPath | document.implementation.createHTMLDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:7:63:7:64 | "" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:10 | newDoc | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:15 | newDoc.body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:25 | newDoc. ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:5:8:52 | newDoc. ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:12:8:15 | body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:17:8:25 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:36 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "<span>" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "<span>" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "<span>" + s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "<span>" + s | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:40 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:29:8:52 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:40:8:40 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | enclosingFunctionBody | s newDoc document implementation createHTMLDocument  newDoc body innerHTML <span> s </span> |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | enclosingFunctionName | insertIntoCreatedDocument |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:8:44:8:52 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:11:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | 'arguments' object of function id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | exceptional return of function id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | functio ... rn s;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:8:13:1 | return of function id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:17:11:18 | id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:11:20:11:20 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | enclosingFunctionBody | s s |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | enclosingFunctionName | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:12:12:12:12 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:15:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | 'arguments' object of function notVulnerable | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | exceptional return of function notVulnerable | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | functio ... html;\\n} | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:8:19:1 | return of function notVulnerable | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:15:17:15:29 | notVulnerable | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:11 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:11:16:21 | s = id("x") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:16 | id | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | exceptional return of id("x") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:15:16:21 | id("x") | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | CalleeFlexibleAccessPath | id |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:16:18:16:20 | "x" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:14 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html =  ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html =  ... /span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html =  ... /span>" | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html =  ... /span>" | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:11:17:41 | html =  ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:25 | "<span>" | stringConcatenatedWith |  -endpoint- s + '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "<span>" + s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "<span>" + s | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "<span>" + s | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "<span>" + s | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:29 | "<span>" + s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | "<span> ... /span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | "<span> ... /span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | "<span> ... /span>" | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | "<span> ... /span>" | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:18:17:41 | "<span> ... /span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:29:17:29 | s | stringConcatenatedWith | '<span>' -endpoint- '</span>' |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:17:33:17:41 | "</span>" | stringConcatenatedWith | '<span>' + s -endpoint-  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:17 | document.body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:27 | documen ... nerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ...  = html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ...  = html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ...  = html | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ...  = html | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:5:18:34 | documen ...  = html | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:14:18:17 | body | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:19:18:27 | innerHTML | fileImports |  |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | assignedToPropName | innerHTML |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | contextFunctionInterfaces | basicHtmlConstruction(s)\nid(s)\ninsertIntoCreatedDocument(s)\nnotVulnerable() |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | enclosingFunctionBody | s id x html <span> s </span> document body innerHTML html |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | enclosingFunctionName | notVulnerable |
| autogenerated/Xss/UnsafeHtmlConstruction/typed.ts:18:31:18:34 | html | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:1:0 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:1:195:2 | (functi ... \\n\\t};\\n}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:1:1 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | functio ... ;\\n\\t};\\n} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:1:2:195:1 | return of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:2:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:2:63:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:4:2:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:7:2:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:2:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | functio ... \\t\\t}\\n\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:19:63:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:28:2:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:2:38:2:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | $(options) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:3:3:12 | exceptional return of $(options) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:3:5:3:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:3:5:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:5:5:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:5:13:5:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:15 | isElement | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | exceptional return of isEleme ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:7:7:31 | isEleme ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:17:7:23 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:7:25:7:30 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:4:8:20 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:12 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:6:8:19 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:8:14:8:19 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target  ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target  ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target  ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:7:11:29 | target  ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:22 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:16:11:29 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:11:24:11:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:15 | isElement | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | exceptional return of isElement(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:13:7:13:23 | isElement(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:4:14:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:14:6:14:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:19 | typeof target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof  ... string" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof  ... string" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof  ... string" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:7:17:31 | typeof  ... string" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:14:17:19 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:17:24:17:31 | "string" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:4:18:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:18:6:18:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:3:21:3 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:19 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:7:21:33 | target. ... defined | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:14:21:19 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:21:25:21:33 | undefined | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:4:22:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:22:6:22:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:4:24:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:24:6:24:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:19 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:7:27:33 | target. ... defined | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:14:27:19 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:27:25:27:33 | undefined | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:4:28:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:28:6:28:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:4:30:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:30:6:30:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:26 | typeof target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof  ... efined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof  ... efined" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof  ... efined" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:7:33:42 | typeof  ... efined" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:19 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:14:33:26 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:21:33:26 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:33:32:33:42 | "undefined" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:4:34:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:34:6:34:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:4:36:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:36:6:36:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:26 | typeof target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof  ... efined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof  ... efined" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof  ... efined" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:7:39:42 | typeof  ... efined" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:19 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:14:39:26 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:21:39:26 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:39:32:39:42 | "undefined" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:4:40:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:40:6:40:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:4:42:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:42:6:42:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:7:45:19 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:45:14:45:19 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:4:46:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:46:6:46:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:4:48:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:48:6:48:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:7:51:20 | !target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:13 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:8:51:20 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:51:15:51:20 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:4:52:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:52:6:52:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:4:54:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:54:6:54:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:7:57:21 | !!target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:8:57:21 | !target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:14 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:9:57:21 | target.jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:57:16:57:21 | jquery | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:4:58:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:58:6:58:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:4:60:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:60:6:60:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:65:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:2:69:2 | $.fn.my ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:4:65:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:7:65:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:65:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:19:69:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:28:65:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:38:65:44 | element | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:65:47:65:53 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:6 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:15 | this.$element | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:3:66:33 | this.$e ... lement) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:8:66:15 | $element | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:24 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | assignedToPropName | $element |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | $(element) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:24:66:33 | exceptional return of $(element) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:66:26:66:32 | element | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:6 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:14 | this.options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:3:67:44 | this.op ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:8:67:14 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:24 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:31 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | assignedToPropName | options |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:24:67:44 | exceptional return of $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:26:67:31 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:33:67:34 | {} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:67:37:67:43 | options | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:10 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:18 | this.options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:7:68:25 | this.options.parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:12:68:18 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:20:68:25 | parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:31 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:39 | this.$parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:28:68:64 | this.$p ... parent) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:33:68:39 | $parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:43 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | assignedToPropName | $parent |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | $(this. ... parent) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:43:68:64 | exceptional return of $(this. ... parent) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:48 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:56 | this.options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:45:68:63 | this.options.parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:50:68:56 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | contextSurroundingFunctionParameters | ()\n(element, options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:68:58:68:63 | parent | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:71:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:2:74:2 | $.fn.my ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:4:71:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:7:71:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:71:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | functio ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:19:74:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:28:71:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:71:38:71:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | $(optio ... ar.baz) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:3:72:24 | exceptional return of $(optio ... ar.baz) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:15 | options.foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:19 | options.foo.bar | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:13:72:15 | foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:17:72:19 | bar | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:72:21:72:23 | baz | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | $(options.html) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:3:73:17 | exceptional return of $(options.html) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:5:73:16 | options.html | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:73:13:73:16 | html | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:76:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:2:78:2 | $.fn.my ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:4:76:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:7:76:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:76:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:19:78:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:28:76:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:76:38:76:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | $(x) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:6 | exceptional return of $(x) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:15 | $(x).appendTo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | $(x).ap ... ar.baz) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:3:77:36 | exceptional return of $(x).ap ... ar.baz) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:5:77:5 | x | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:8:77:15 | appendTo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:23 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:27 | options.foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:31 | options.foo.bar | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | CalleeFlexibleAccessPath | $().appendTo |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:25:77:27 | foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:29:77:31 | bar | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:77:33:77:35 | baz | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:80:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:2:82:2 | $.fn.my ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:4:80:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:7:80:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:80:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | functio ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:19:82:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:28:80:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:80:38:80:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | $("#" + ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:3:81:25 | exceptional return of $("#" + ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:7 | "#" | stringConcatenatedWith |  -endpoint- options.target |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:5:81:24 | "#" + options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:17 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:11:81:24 | options.target | stringConcatenatedWith | '#' -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:81:19:81:24 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:84:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:2:93:2 | $.fn.my ... ns);\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:4:84:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:7:84:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:84:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | functio ... ns);\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:19:93:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:28:84:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:84:38:84:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:85:2 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | 'arguments' object of function f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | exceptional return of function f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ...  OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ...  OK\\n\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ...  OK\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | functio ...  OK\\n\\t\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:3:91:3 | return of function f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:12:85:12 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:85:14:85:14 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:7 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:9 | this.o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o  ... ({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o  ... ({}, o) | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o  ... ({}, o) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:4:86:27 | this.o  ... ({}, o) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:9:86:9 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:13 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:20 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | assignedToPropName | o |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | $.extend({}, o) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:13:86:27 | exceptional return of $.extend({}, o) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:15:86:20 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:22:86:23 | {} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:86:26:86:26 | o | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:8 | t | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:8:87:24 | t = this.o.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:15 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:17 | this.o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:12:87:24 | this.o.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:17:87:17 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:87:19:87:24 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:10 | console | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:14 | console.log | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | console.log(t) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:4:89:17 | exceptional return of console.log(t) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:12:89:14 | log | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:89:16:89:16 | t | receiverName | console |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | $(t) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:4:90:7 | exceptional return of $(t) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:90:6:90:6 | t | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:3 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | exceptional return of f(options) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:3:92:12 | f(options) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | CalleeFlexibleAccessPath | f |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:92:5:92:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:95:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:2:99:2 | $.fn.my ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:4:95:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:7:95:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:95:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | functio ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:19:99:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:28:95:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:95:38:95:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target  ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target  ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target  ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:7:96:29 | target  ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:22 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:16:96:29 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:96:24:96:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:10 | safe | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:14 | safe.has | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | exceptional return of safe.has(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:7:97:22 | safe.has(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:12:97:14 | has | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | CalleeFlexibleAccessPath | safe.has |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:97:16:97:21 | target | receiverName | safe |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:4:98:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:98:6:98:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:101:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:2:108:2 | $.fn.my ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:4:101:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:7:101:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:101:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:19:108:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:28:101:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:101:38:101:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:102:9 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:3:105:13 | options ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:13 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:102:20 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:13:105:13 | exceptional return of $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:15:102:20 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:102:22:105:3 | {\\n\\t\\t\\tme ... in'\\n\\t\\t} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:7 | menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:4:103:22 | menu: '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | InputAccessPathFromCallee | 0.menu |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | assignedToPropName | menu |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:103:10:103:22 | '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:9 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:4:104:23 | target: '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | InputAccessPathFromCallee | 0.target |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | assignedToPropName | target |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:104:12:104:23 | '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:105:6:105:12 | options | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | $(options.menu) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:3:106:17 | exceptional return of $(options.menu) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:5:106:16 | options.menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:106:13:106:16 | menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:3:107:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:5:107:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:107:13:107:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:110:24 | $.fn.my ... efaults | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:2:113:2 | $.fn.my ... gin'\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:4:110:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:7:110:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:17:110:24 | defaults | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | assignedToPropName | defaults |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:110:28:113:2 | {\\n\\t\\tmen ... gin'\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:6 | menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:3:111:21 | menu: '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '<div></div>' | assignedToPropName | menu |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '<div></div>' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '<div></div>' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '<div></div>' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:111:9:111:21 | '<div></div>' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:8 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:3:112:22 | target: '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | assignedToPropName | target |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:112:11:112:22 | '.my_plugin' | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:114:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:2:118:2 | $.fn.my ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:4:114:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:7:114:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:114:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:19:118:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:28:114:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:114:38:114:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:9 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:3:115:58 | options ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:13 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:20 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:13:115:58 | exceptional return of $.exten ... ptions) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:15:115:20 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:22:115:23 | {} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:26 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:29 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:39 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:26:115:48 | $.fn.my ... efaults | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:28:115:29 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:31:115:39 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:41:115:48 | defaults | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | InputArgumentIndex | 2 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:115:51:115:57 | options | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | $(options.menu) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:3:116:17 | exceptional return of $(options.menu) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:5:116:16 | options.menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:116:13:116:16 | menu | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:3:117:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:5:117:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:117:13:117:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:15 | pluginName | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginN ... plugin" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:6:120:29 | pluginName | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:120:19:120:29 | "my_plugin" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:121:17 | $.fn[pluginName] | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:2:123:2 | $.fn[pl ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:4:121:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:7:121:16 | pluginName | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:121:20 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:21:123:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:30:121:38 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:121:40:121:46 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:3:122:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:5:122:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:122:13:122:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:125:9 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | $.exten ... \\t\\t}\\n\\t}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:2:129:3 | exceptional return of $.exten ... \\t\\t}\\n\\t}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:4:125:9 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:11 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:11:125:14 | $.fn | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:13:125:14 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:125:17:129:2 | {\\n\\t\\tmy_ ... \\n\\t\\t}\\n\\t} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:126:11 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:3:128:3 | my_plug ...  OK\\n\\t\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:126:13 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | InputAccessPathFromCallee | 1.my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | functio ...  OK\\n\\t\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:14:128:3 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:23:126:31 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:126:33:126:39 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:4:127:20 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:12 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:6:127:19 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:127:14:127:19 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:131:11 | $.fn.affix | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:2:133:2 | $.fn.af ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:4:131:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:7:131:11 | affix | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:131:14 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | assignedToPropName | affix |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:15:133:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:24:131:32 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:131:34:131:40 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:3:132:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:5:132:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:132:13:132:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:135:13 | $.fn.tooltip | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:2:137:2 | $.fn.to ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:4:135:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:7:135:13 | tooltip | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:135:16 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | assignedToPropName | tooltip |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:17:137:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:26:135:34 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:135:36:135:42 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | $(optio ... lector) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:3:136:30 | exceptional return of $(optio ... lector) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:20 | options.viewport | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:13:136:20 | viewport | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:136:22:136:29 | selector | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:139:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:2:151:2 | $.fn.my ... uery\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:4:139:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:7:139:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:139:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | functio ... uery\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:19:151:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:28:139:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:139:38:139:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:18 | intentional1 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intenti ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:7:140:57 | intentional1 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:28 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:35 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:22:140:57 | options ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:30:140:35 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `<div>hello</div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `<div>hello</div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `<div>hello</div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:40:140:57 | `<div>hello</div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 | <div>hello</div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 | <div>hello</div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 | <div>hello</div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 | <div>hello</div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:140:41:140:56 | <div>hello</div> | stringConcatenatedWith |  -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | $(intentional1) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:3:141:17 | exceptional return of $(intentional1) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:141:5:141:16 | intentional1 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:18 | intentional2 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intenti ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:7:143:51 | intentional2 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `<div>$ ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `<div>$ ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `<div>$ ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:22:143:51 | `<div>$ ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 | <div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 | <div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 | <div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 | <div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:23:143:27 | <div> | stringConcatenatedWith |  -endpoint- options.target + '</div>' |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:36 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:30:143:43 | options.target | stringConcatenatedWith | '<div>' -endpoint- '</div>' |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:38:143:43 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | </div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | </div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | </div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | </div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:143:45:143:50 | </div> | stringConcatenatedWith | '<div>' + options.target -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | $(intentional2) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:3:144:17 | exceptional return of $(intentional2) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:144:5:144:16 | intentional2 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:18 | intentional3 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intenti ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:7:146:54 | intentional3 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `<div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `<div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `<div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:28 | `<div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `<div>` ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `<div>` ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `<div>` ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:22:146:54 | `<div>` ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 | <div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 | <div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 | <div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 | <div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:23:146:27 | <div> | stringConcatenatedWith |  -endpoint- ? |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:38 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:45 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:32:146:54 | options ... </div>` | stringConcatenatedWith | '<div>' -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:40:146:45 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `</div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `</div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `</div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:47:146:54 | `</div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | </div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | </div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | </div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:146:48:146:53 | </div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | $(intentional3) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:3:147:17 | exceptional return of $(intentional3) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:147:5:147:16 | intentional3 | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:19 | unintentional | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | uninten ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:7:149:61 | unintentional | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `<div c ... </div>` | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `<div c ... </div>` | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `<div c ... </div>` | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:23:149:61 | `<div c ... </div>` | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 | <div class=" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 | <div class=" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 | <div class=" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 | <div class=" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:24:149:35 | <div class=" | stringConcatenatedWith |  -endpoint- options.target + '"></div>' |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:38:149:51 | options.target | stringConcatenatedWith | '<div class="' -endpoint- '"></div>' |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:46:149:51 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "></div> | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "></div> | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "></div> | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "></div> | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:149:53:149:60 | "></div> | stringConcatenatedWith | '<div class="' + options.target -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | $(unintentional) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | $(unintentional) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | $(unintentional) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | $(unintentional) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | exceptional return of $(unintentional) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | exceptional return of $(unintentional) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | exceptional return of $(unintentional) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:3:150:18 | exceptional return of $(unintentional) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:150:5:150:17 | unintentional | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:153:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:158:2 | $.fn.my ... NCY]\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:158:2 | $.fn.my ... NCY]\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:158:2 | $.fn.my ... NCY]\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:2:158:2 | $.fn.my ... NCY]\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:4:153:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:4:153:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:4:153:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:4:153:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:7:153:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:7:153:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:7:153:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:7:153:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:153:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:153:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:153:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:153:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | functio ... NCY]\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | functio ... NCY]\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | functio ... NCY]\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | functio ... NCY]\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | functio ... NCY]\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:19:158:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:28:153:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:28:153:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:28:153:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:28:153:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:153:38:153:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target  ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target  ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target  ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:7:154:29 | target  ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:22 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:22 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:22 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:29 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:16:154:29 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:24:154:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:24:154:29 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:24:154:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:154:24:154:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:8 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:8 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:8 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:8 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:28 | target  ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:28 | target  ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:28 | target  ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:28 | target  ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:65 | target  ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:65 | target  ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:65 | target  ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:3:155:65 | target  ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:21 | DEFAULTS | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:21 | DEFAULTS | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:21 | DEFAULTS | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:21 | DEFAULTS | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:28 | DEFAULTS.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:28 | DEFAULTS.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:28 | DEFAULTS.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:14:155:28 | DEFAULTS.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:23:155:28 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:23:155:28 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:23:155:28 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:23:155:28 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:31 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:31 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:31 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:31 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:31:155:39 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:33:155:38 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:42 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:42 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:42 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:42 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | $(document) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | exceptional return of $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:52 | exceptional return of $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:57 | $(document).find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:57 | $(document).find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:57 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:57 | $(document).find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | $(docum ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | exceptional return of $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | exceptional return of $(docum ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | exceptional return of $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:42:155:65 | exceptional return of $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:44:155:51 | document | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:54:155:57 | find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:54:155:57 | find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:54:155:57 | find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:54:155:57 | find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:155:59:155:64 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:9 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:9 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:9 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:16 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:16 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:16 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:16 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:36 | options ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:36 | options ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:36 | options ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:36 | options ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:89 | options ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:89 | options ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:89 | options ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:3:156:89 | options ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:11:156:16 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:11:156:16 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:11:156:16 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:11:156:16 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:29 | DEFAULTS | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:29 | DEFAULTS | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:29 | DEFAULTS | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:29 | DEFAULTS | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:36 | DEFAULTS.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:36 | DEFAULTS.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:36 | DEFAULTS.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:22:156:36 | DEFAULTS.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:31:156:36 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:31:156:36 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:31:156:36 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:31:156:36 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:39 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:39 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:39 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:39 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:39:156:55 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:47 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:47 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:47 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:47 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:41:156:54 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:49:156:54 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:49:156:54 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:49:156:54 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:49:156:54 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:58 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:58 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:58 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:58 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | $(document) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | exceptional return of $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:68 | exceptional return of $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:73 | $(document).find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:73 | $(document).find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:73 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:73 | $(document).find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | $(docum ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | exceptional return of $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | exceptional return of $(docum ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | exceptional return of $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:58:156:89 | exceptional return of $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:60:156:67 | document | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:70:156:73 | find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:70:156:73 | find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:70:156:73 | find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:70:156:73 | find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:81 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:81 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:81 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:81 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:75:156:88 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:83:156:88 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:83:156:88 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:83:156:88 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:156:83:156:88 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:9 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:9 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:9 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:17 | options.targets | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:17 | options.targets | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:17 | options.targets | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:17 | options.targets | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:19 | options.targets.a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:19 | options.targets.a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:19 | options.targets.a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:19 | options.targets.a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:39 | options ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:39 | options ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:39 | options ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:39 | options ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:96 | options ... rget.a) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:96 | options ... rget.a) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:96 | options ... rget.a) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:3:157:96 | options ... rget.a) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:11:157:17 | targets | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:11:157:17 | targets | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:11:157:17 | targets | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:11:157:17 | targets | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:19:157:19 | a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:19:157:19 | a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:19:157:19 | a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:19:157:19 | a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:32 | DEFAULTS | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:32 | DEFAULTS | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:32 | DEFAULTS | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:32 | DEFAULTS | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:39 | DEFAULTS.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:39 | DEFAULTS.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:39 | DEFAULTS.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:25:157:39 | DEFAULTS.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:34:157:39 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:34:157:39 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:34:157:39 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:34:157:39 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:42 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:42 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:42 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:42 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | $(options.target.a) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | $(options.target.a) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | $(options.target.a) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | $(options.target.a) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | exceptional return of $(options.target.a) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | exceptional return of $(options.target.a) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | exceptional return of $(options.target.a) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:42:157:60 | exceptional return of $(options.target.a) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:50 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:50 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:50 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:50 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:57 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:57 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:57 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:57 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:52:157:57 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:52:157:57 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:52:157:57 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:52:157:57 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:59:157:59 | a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:59:157:59 | a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:59:157:59 | a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:59:157:59 | a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:63 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:63 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:63 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:63 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | $(document) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | exceptional return of $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:73 | exceptional return of $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:78 | $(document).find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:78 | $(document).find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:78 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:78 | $(document).find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | $(docum ... rget.a) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | $(docum ... rget.a) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | $(docum ... rget.a) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | $(docum ... rget.a) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | exceptional return of $(docum ... rget.a) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | exceptional return of $(docum ... rget.a) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | exceptional return of $(docum ... rget.a) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:63:157:96 | exceptional return of $(docum ... rget.a) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:65:157:72 | document | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:75:157:78 | find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:75:157:78 | find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:75:157:78 | find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:75:157:78 | find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:86 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:86 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:86 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:86 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:93 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:93 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:93 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:93 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:80:157:95 | options.target.a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:88:157:93 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:88:157:93 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:88:157:93 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:88:157:93 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:95:157:95 | a | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:95:157:95 | a | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:95:157:95 | a | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:157:95:157:95 | a | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:15 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:15 | $.fn.my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:15 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:160:15 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:173:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:173:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:173:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:2:173:2 | $.fn.my ... \\t\\t}\\n\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:4:160:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:4:160:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:4:160:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:4:160:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:7:160:15 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:7:160:15 | my_plugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:7:160:15 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:7:160:15 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:160:18 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:160:18 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:160:18 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:160:18 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | 'arguments' object of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | 'arguments' object of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | 'arguments' object of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | 'arguments' object of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | exceptional return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | exceptional return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | exceptional return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | exceptional return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | functio ... \\t\\t}\\n\\n\\t} | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | functio ... \\t\\t}\\n\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | functio ... \\t\\t}\\n\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | functio ... \\t\\t}\\n\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | functio ... \\t\\t}\\n\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | return of function my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | return of function my_plugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | return of function my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:19:173:2 | return of function my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:28:160:36 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:28:160:36 | my_plugin | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:28:160:36 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:28:160:36 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:160:38:160:44 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | $(anyPr ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | $(anyPr ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | $(anyPr ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | $(anyPr ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | exceptional return of $(anyPr ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | exceptional return of $(anyPr ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | exceptional return of $(anyPr ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:3:161:31 | exceptional return of $(anyPr ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:13 | anyPrefix | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:13 | anyPrefix | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:13 | anyPrefix | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:13 | anyPrefix | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:13 | anyPrefix | stringConcatenatedWith |  -endpoint- options.target |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:5:161:30 | anyPref ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:23 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:23 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:23 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:23 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:30 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:30 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:30 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:30 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:17:161:30 | options.target | stringConcatenatedWith | anyPrefix -endpoint-  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:25:161:30 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:25:161:30 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:25:161:30 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:161:25:161:30 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | $(somet ... arget)) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | $(somet ... arget)) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | $(somet ... arget)) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | $(somet ... arget)) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | exceptional return of $(somet ... arget)) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | exceptional return of $(somet ... arget)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | exceptional return of $(somet ... arget)) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:3:163:55 | exceptional return of $(somet ... arget)) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:13 | something | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:13 | something | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:13 | something | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:13 | something | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:21 | something.replace | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:21 | something.replace | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:21 | something.replace | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:21 | something.replace | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | exceptional return of somethi ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | exceptional return of somethi ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | exceptional return of somethi ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | exceptional return of somethi ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:5:163:54 | somethi ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:15:163:21 | replace | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:15:163:21 | replace | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:15:163:21 | replace | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:15:163:21 | replace | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | CalleeFlexibleAccessPath | something.replace |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:23:163:37 | "%PLACEHOLDER%" | receiverName | something |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:46 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:46 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:46 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:46 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | CalleeFlexibleAccessPath | something.replace |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:40:163:53 | options.target | receiverName | something |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:48:163:53 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:48:163:53 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:48:163:53 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:163:48:163:53 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target  ... .target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target  ... .target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target  ... .target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:7:165:29 | target  ... .target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:22 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:22 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:22 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:22 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:29 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:29 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:29 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:16:165:29 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:24:165:29 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:24:165:29 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:24:165:29 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:165:24:165:29 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:16 | target.foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:16 | target.foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:16 | target.foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:7:166:16 | target.foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:14:166:16 | foo | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:14:166:16 | foo | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:14:166:16 | foo | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:166:14:166:16 | foo | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:4:167:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:167:6:167:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:19 | target.length | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:19 | target.length | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:19 | target.length | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:7:169:19 | target.length | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:14:169:19 | length | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:14:169:19 | length | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:14:169:19 | length | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:169:14:169:19 | length | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:4 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:4 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:4 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:4 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | $(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | exceptional return of $(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | exceptional return of $(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | exceptional return of $(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:4:170:12 | exceptional return of $(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:170:6:170:11 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:175:1 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:175:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:175:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:175:1 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | 'arguments' object of function setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | 'arguments' object of function setupPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | 'arguments' object of function setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | 'arguments' object of function setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | exceptional return of function setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | exceptional return of function setupPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | exceptional return of function setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | exceptional return of function setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | functio ...  o.f\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | functio ...  o.f\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | functio ...  o.f\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | functio ...  o.f\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | return of function setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | return of function setupPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | return of function setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:2:177:2 | return of function setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:11:175:21 | setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:175:23:175:23 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:3 | $ | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:6 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:6 | $.fn | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:6 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:6 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:16 | $.fn.my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:16 | $.fn.my_plugin | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:16 | $.fn.my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:16 | $.fn.my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:22 | $.fn.my_plugin = o.f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:22 | $.fn.my_plugin = o.f | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:22 | $.fn.my_plugin = o.f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:3:176:22 | $.fn.my_plugin = o.f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:5:176:6 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:5:176:6 | fn | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:5:176:6 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:5:176:6 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:8:176:16 | my_plugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:8:176:16 | my_plugin | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:8:176:16 | my_plugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:8:176:16 | my_plugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:20 | o | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:20 | o | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:20 | o | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:20 | o | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:22 | o.f | assignedToPropName | my_plugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:22 | o.f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:22 | o.f | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:22 | o.f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:20:176:22 | o.f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:22:176:22 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:22:176:22 | f | contextSurroundingFunctionParameters | (o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:22:176:22 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:176:22:176:22 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:178:12 | setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:178:12 | setupPlugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:178:12 | setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:178:12 | setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | exceptional return of setupPl ... OK\\n\\t}}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | exceptional return of setupPl ... OK\\n\\t}}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | exceptional return of setupPl ... OK\\n\\t}}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | exceptional return of setupPl ... OK\\n\\t}}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | setupPl ... OK\\n\\t}}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | setupPl ... OK\\n\\t}}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | setupPl ... OK\\n\\t}}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:2:180:4 | setupPl ... OK\\n\\t}}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | CalleeFlexibleAccessPath | setupPlugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:14:180:3 | {f: fun ...  OK\\n\\t}} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:178:15 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:178:15 | f | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:178:15 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:178:15 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:15:180:2 | f: func ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:178:17 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:178:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:178:17 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:178:17 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | 'arguments' object of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | 'arguments' object of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | 'arguments' object of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | 'arguments' object of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | exceptional return of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | exceptional return of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | exceptional return of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | exceptional return of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | CalleeFlexibleAccessPath | setupPlugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | InputAccessPathFromCallee | 0.f |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | assignedToPropName | f |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | functio ... T OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | return of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | return of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | return of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:18:180:2 | return of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:178:27:178:33 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | $(options.target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | exceptional return of $(options.target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | exceptional return of $(options.target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | exceptional return of $(options.target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:3:179:19 | exceptional return of $(options.target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:11 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:11 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:11 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:11 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:5:179:18 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:13:179:18 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:13:179:18 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:13:179:18 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:179:13:179:18 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:181:12 | setupPlugin | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:181:12 | setupPlugin | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:181:12 | setupPlugin | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:181:12 | setupPlugin | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | exceptional return of setupPl ... OK\\n\\t}}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | exceptional return of setupPl ... OK\\n\\t}}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | exceptional return of setupPl ... OK\\n\\t}}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | exceptional return of setupPl ... OK\\n\\t}}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | setupPl ... OK\\n\\t}}) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | setupPl ... OK\\n\\t}}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | setupPl ... OK\\n\\t}}) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:2:183:4 | setupPl ... OK\\n\\t}}) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | CalleeFlexibleAccessPath | setupPlugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:14:183:3 | {f:func ...  OK\\n\\t}} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:181:15 | f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:181:15 | f | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:181:15 | f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:181:15 | f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:15:183:2 | f:funct ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:181:16 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:181:16 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:181:16 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:181:16 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | 'arguments' object of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | 'arguments' object of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | 'arguments' object of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | 'arguments' object of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | exceptional return of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | exceptional return of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | exceptional return of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | exceptional return of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | CalleeFlexibleAccessPath | setupPlugin |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | InputAccessPathFromCallee | 0.f |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | assignedToPropName | f |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | functio ... / OK\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | return of method f | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | return of method f | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | return of method f | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:17:183:2 | return of method f | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:181:26:181:32 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:3 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:3 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:3 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | $(document) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | exceptional return of $(document) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:13 | exceptional return of $(document) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:18 | $(document).find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:18 | $(document).find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:18 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:18 | $(document).find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | $(docum ... target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | exceptional return of $(docum ... target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | exceptional return of $(docum ... target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | exceptional return of $(docum ... target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:3:182:34 | exceptional return of $(docum ... target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:5:182:12 | document | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:15:182:18 | find | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:15:182:18 | find | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:15:182:18 | find | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:15:182:18 | find | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:26 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:26 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:26 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:26 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:20:182:33 | options.target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:28:182:33 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:28:182:33 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:28:182:33 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:182:28:182:33 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:2 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:2 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:5 | $.fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:5 | $.fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:5 | $.fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:5 | $.fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:14 | $.fn.position | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:14 | $.fn.position | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:14 | $.fn.position | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:185:14 | $.fn.position | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:194:2 | $.fn.po ... et);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:194:2 | $.fn.po ... et);\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:194:2 | $.fn.po ... et);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:2:194:2 | $.fn.po ... et);\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:4:185:5 | fn | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:4:185:5 | fn | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:4:185:5 | fn | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:4:185:5 | fn | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:7:185:14 | position | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:7:185:14 | position | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:7:185:14 | position | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:7:185:14 | position | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:17 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:17 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:17 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:17 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:18 | arguments | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:18 | arguments | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:18 | arguments | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:185:18 | arguments | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | exceptional return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | exceptional return of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | functio ... et);\\n\\t} | assignedToPropName | position |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | functio ... et);\\n\\t} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | functio ... et);\\n\\t} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | functio ... et);\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | functio ... et);\\n\\t} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | return of anonymous function | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:18:194:2 | return of anonymous function | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:185:28:185:34 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:15 | !options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:15 | !options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:15 | !options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:15 | !options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:30 | !option ... ions.of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:30 | !option ... ions.of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:30 | !option ... ions.of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:8:186:30 | !option ... ions.of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:9:186:15 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:20:186:30 | !options.of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:20:186:30 | !options.of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:20:186:30 | !options.of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:20:186:30 | !options.of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:27 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:27 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:27 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:27 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:30 | options.of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:30 | options.of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:30 | options.of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:21:186:30 | options.of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:29:186:30 | of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:29:186:30 | of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:29:186:30 | of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:186:29:186:30 | of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:25 | doSomethingElse | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:25 | doSomethingElse | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:25 | doSomethingElse | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:25 | doSomethingElse | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | doSomet ... ments ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | doSomet ... ments ) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | doSomet ... ments ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | doSomet ... ments ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | exceptional return of doSomet ... ments ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | exceptional return of doSomet ... ments ) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | exceptional return of doSomet ... ments ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:11:187:44 | exceptional return of doSomet ... ments ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | CalleeFlexibleAccessPath | doSomethingElse |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:28:187:31 | this | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | CalleeFlexibleAccessPath | doSomethingElse |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:187:34:187:42 | arguments | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:9 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:9 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:9 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:9 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options ... tions ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options ... tions ) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options ... tions ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:3:190:35 | options ... tions ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:13 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:13 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:13 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:20 | $.extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:20 | $.extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:20 | $.extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:20 | $.extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | $.exten ... tions ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | $.exten ... tions ) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | $.exten ... tions ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | $.exten ... tions ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | exceptional return of $.exten ... tions ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | exceptional return of $.exten ... tions ) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | exceptional return of $.exten ... tions ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:13:190:35 | exceptional return of $.exten ... tions ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:15:190:20 | extend | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:15:190:20 | extend | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:15:190:20 | extend | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:15:190:20 | extend | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:23:190:24 | {} | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | CalleeFlexibleAccessPath | $.extend |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | InputArgumentIndex | 1 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:190:27:190:33 | options | receiverName | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:12 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:12 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:12 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:12 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target  ... ns.of ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target  ... ns.of ) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target  ... ns.of ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:7:192:30 | target  ... ns.of ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:16 | $ | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:16 | $ | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:16 | $ | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | $( options.of ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | $( options.of ) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | $( options.of ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | $( options.of ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | exceptional return of $( options.of ) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | exceptional return of $( options.of ) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | exceptional return of $( options.of ) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:16:192:30 | exceptional return of $( options.of ) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:25 | options | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:25 | options | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:25 | options | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:25 | options | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:19:192:28 | options.of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:27:192:28 | of | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:27:192:28 | of | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:27:192:28 | of | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:192:27:192:28 | of | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:9 | console | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:9 | console | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:9 | console | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:9 | console | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:13 | console.log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:13 | console.log | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:13 | console.log | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:13 | console.log | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | console.log(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | console.log(target) | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | console.log(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | console.log(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | exceptional return of console.log(target) | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | exceptional return of console.log(target) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | exceptional return of console.log(target) | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:3:193:21 | exceptional return of console.log(target) | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:11:193:13 | log | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:11:193:13 | log | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:11:193:13 | log | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:11:193:13 | log | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | CalleeFlexibleAccessPath | console.log |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | InputArgumentIndex | 0 |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | contextFunctionInterfaces | f(o)\nf(options)\nf(options)\nmy_plugin(element, options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nmy_plugin(options)\nposition(options)\nsetupPlugin(o) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | contextSurroundingFunctionParameters | ()\n(options) |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | enclosingFunctionName |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | fileImports |  |
| autogenerated/Xss/UnsafeJQueryPlugin/unsafe-jquery-plugin.js:193:15:193:20 | target | receiverName | console |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:0 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:1 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:26 | import  ... react'; | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:26 | import  ... react'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:1:1:26 | import  ... react'; | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:8:1:12 | React | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:1:19:1:25 | 'react' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:1:19:1:25 | 'react' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:1:19:1:25 | 'react' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:1:2:62 | import  ... ormik'; | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:1:2:62 | import  ... ormik'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:1:2:62 | import  ... ormik'; | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:10:2:15 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:18:2:27 | withFormik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:30:2:45 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:2:54:2:61 | 'formik' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:2:54:2:61 | 'formik' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:2:54:2:61 | 'formik' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:4:17 | FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:4:17 | FormikBasic | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:4:17 | FormikBasic | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:20:1 | FormikB ... /div>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:20:1 | FormikB ... /div>\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:7:20:1 | FormikB ... /div>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:4:20 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | 'arguments' object of function FormikBasic | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | () => ( ... /div>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | exceptional return of function FormikBasic | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:4:21:20:1 | return of function FormikBasic | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n    < ... /div>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n    < ... /div>\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n    < ... /div>\\n) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n    < ... /div>\\n) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:4:27:20:1 | (\\n    < ... /div>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 | <div>\\n  ...  </div> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 | <div>\\n  ...  </div> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 | <div>\\n  ...  </div> | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 | <div>\\n  ...  </div> | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:5:5:19:10 | <div>\\n  ...  </div> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:5:6:5:8 | div | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n         | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n         | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:5:10:6:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | <Formik ... Formik> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | <Formik ... Formik> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | <Formik ... Formik> | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | <Formik ... Formik> | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:6:9:18:17 | <Formik ... Formik> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:6:10:6:15 | Formik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:25 | initialValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:13:7:55 | initial ... : '' }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | assignedToPropName | initialValues |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:28:7:54 | { email ... d: '' } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:34 | email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:30:7:38 | email: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | assignedToPropName | email |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:37:7:38 | '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:48 | password | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:41:7:52 | password: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | assignedToPropName | password |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:7:51:7:52 | '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:8:20 | validate | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:13:10:14 | validat ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:8:28 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | assignedToPropName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:8:23:10:13 | values  ...       } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:17 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:24 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:29 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | $("#id" ... es.foo) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:17:9:41 | exceptional return of $("#id" ... es.foo) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:19:9:23 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:26:9:29 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:36 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:31:9:40 | values.foo | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:9:38:9:40 | foo | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:11:20 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:13:13:14 | onSubmi ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | (values ...       } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:23:13:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:24:11:29 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:32:11:48 | { setSubmitting } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:11:34:11:46 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:17 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:24 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:29 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | $("#id" ... es.bar) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:17:12:41 | exceptional return of $("#id" ... es.bar) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:19:12:23 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:26:12:29 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:36 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:31:12:40 | values.bar | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | contextSurroundingFunctionParameters | ()\n(values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:12:38:12:40 | bar | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n             | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n             | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n             | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n             | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:14:10:15:12 | \\n             | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ...       ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ...       ) | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ...       ) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ...       ) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | (inputs ...       ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:14:17:13 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:15:15:20 | inputs | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n      ...       ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n      ...       ) | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n      ...       ) | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n      ...       ) | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:15:26:17:13 | (\\n      ...       ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | <form o ... </form> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | <form o ... </form> | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | <form o ... </form> | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | <form o ... </form> | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:17:16:53 | <form o ... </form> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:18:16:21 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:30 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:23:16:45 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | contextSurroundingFunctionParameters | ()\n(inputs) |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:16:33:16:44 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n         | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n         | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:17:15:18:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n     | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n     | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n     | enclosingFunctionBody | div \n         Formik initialValues email  password  validate values $ #id html values foo onSubmit values setSubmitting $ #id html values bar \n             inputs form onSubmit handleSubmit \n         \n     |
| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n     | enclosingFunctionName | FormikBasic |
| autogenerated/Xss/XssThroughDom/forms.js:18:18:19:4 | \\n     | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:22:20 | FormikEnhanced | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:7:31:10 | FormikE ... MyForm) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:22:33 | withFormik | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ...    }\\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | exceptional return of withFor ...    }\\n}) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ...    }\\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:2 | withFor ...    }\\n}) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | exceptional return of withFor ... MyForm) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:24:31:10 | withFor ... MyForm) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | CalleeFlexibleAccessPath | withFormik |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | calleeImports | formik |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:22:35:31:1 | {\\n    m ...     }\\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:20 | mapPropsToValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:5:23:42 | mapProp ... : '' }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | 'arguments' object of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | CalleeFlexibleAccessPath | withFormik |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | InputAccessPathFromCallee | 0.mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | assignedToPropName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | calleeImports | formik |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | () => ({ name: '' }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | exceptional return of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:23:23:42 | return of method mapPropsToValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:29:23:42 | ({ name: '' }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:30:23:41 | { name: '' } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:35 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:32:23:39 | name: '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | assignedToPropName | name |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | enclosingFunctionBody | name  |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | enclosingFunctionName | mapPropsToValues |
| autogenerated/Xss/XssThroughDom/forms.js:23:38:23:39 | '' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:24:12 | validate | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:5:26:5 | validat ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:24:20 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | 'arguments' object of method validate | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | exceptional return of method validate | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | return of method validate | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | CalleeFlexibleAccessPath | withFormik |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | InputAccessPathFromCallee | 0.validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | assignedToPropName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | calleeImports | formik |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:24:15:26:5 | values  ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:9 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:9:25:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:11:25:15 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:18:25:21 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:28 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:23:25:34 | values.email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | contextSurroundingFunctionParameters | (values) |
| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | enclosingFunctionBody | values $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | enclosingFunctionName | validate |
| autogenerated/Xss/XssThroughDom/forms.js:25:30:25:34 | email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:28:16 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:5:30:5 | handleS ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | 'arguments' object of method handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | CalleeFlexibleAccessPath | withFormik |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | InputAccessPathFromCallee | 0.handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | assignedToPropName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | calleeImports | formik |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | (values ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | exceptional return of method handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:19:30:5 | return of method handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:20:28:25 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:28:28:44 | { setSubmitting } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:28:30:28:42 | setSubmitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:9 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:9:29:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:11:29:15 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:18:29:21 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:28 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:23:29:34 | values.email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | contextSurroundingFunctionParameters | (values, ?) |
| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | enclosingFunctionBody | values setSubmitting $ #id html values email |
| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | enclosingFunctionName | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:29:30:29:34 | email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | CalleeFlexibleAccessPath | withFormik() |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | calleeImports | formik |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:31:4:31:9 | MyForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ...  OK \\n}) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ...  OK \\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:1:38:2 | (functi ...  OK \\n}) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:33:1 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | functio ... / OK \\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:33:2:38:1 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:32 | { value ... tForm } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:11:34:53 | { value ... ntext() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:13:34:18 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:21:34:30 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:51 | useFormikContext | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | exceptional return of useFormikContext() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:34:36:34:53 | useFormikContext() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:5 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:5:35:31 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:7:35:11 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:14:35:17 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:24 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:19:35:30 | values.email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:35:26:35:30 | email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:5 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:5:37:35 | exceptional return of $("#id" ... .email) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:7:37:11 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:14:37:17 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:28 | submitForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:19:37:34 | submitForm.email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | enclosingFunctionBody | values submitForm useFormikContext $ #id html values email $ #id html submitForm email |
| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/forms.js:37:30:37:34 | email | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import  ... l-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import  ... l-form' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:1:40:39 | import  ... l-form' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:10:40:13 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:40:22:40:39 | 'react-final-form' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:42:9 | App | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n  />\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n  />\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:7:54:1 | App = ( ... \\n  />\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:42:12 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | 'arguments' object of function App | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n  />\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n  />\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | () => ( ... \\n  />\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | exceptional return of function App | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:42:13:54:1 | return of function App | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n  <Fo ... \\n  />\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n  <Fo ... \\n  />\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n  <Fo ... \\n  />\\n) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n  <Fo ... \\n  />\\n) | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:42:19:54:1 | (\\n  <Fo ... \\n  />\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | <Form\\n  ... )}\\n  /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | <Form\\n  ... )}\\n  /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | <Form\\n  ... )}\\n  /> | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | <Form\\n  ... )}\\n  /> | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:43:3:53:4 | <Form\\n  ... )}\\n  /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:43:4:43:7 | Form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:44:12 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:5:46:6 | onSubmi ... \\n    }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | async v ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:15:46:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:44:21:44:26 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:7 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:14 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:19 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | $("#id" ... stooge) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:7:45:34 | exceptional return of $("#id" ... stooge) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:9:45:13 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:16:45:19 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:26 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:21:45:33 | values.stooge | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | contextSurroundingFunctionParameters | ()\n(values) |
| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:45:28:45:33 | stooge | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:17 | initialValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:5:47:56 | initial ... alse }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | assignedToPropName | initialValues |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:20:47:55 | { stoog ... false } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:27 | stooge | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:22:47:36 | stooge: 'larry' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | assignedToPropName | stooge |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:30:47:36 | 'larry' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:46 | employed | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:39:47:53 | employed: false | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | assignedToPropName | employed |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:47:49:47:53 | false | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:48:10 | render | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:5:52:6 | render= ... \\n    )} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | assignedToPropName | render |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | ({ hand ... >\\n    ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:13:52:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:14:48:65 | { handl ... alues } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:16:48:27 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:30:48:33 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:36:48:45 | submitting | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:48:48:55 | pristine | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:58:48:63 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n      ... >\\n    ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n      ... >\\n    ) | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n      ... >\\n    ) | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n      ... >\\n    ) | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:48:71:52:5 | (\\n      ... >\\n    ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | <form o ... </form> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | <form o ... </form> | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | <form o ... </form> | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | <form o ... </form> | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:7:51:13 | <form o ... </form> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:8:49:11 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:20 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:13:49:35 | onSubmi ... Submit} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:23:49:34 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n         | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n         | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n         | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:49:37:50:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | <input  ... /input> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | <input  ... /input> | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | <input  ... /input> | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | <input  ... /input> | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:9:50:49 | <input  ... /input> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:10:50:14 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:19 | type | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:16:50:26 | type="text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | assignedToPropName | type |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:21:50:26 | "text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:31 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:28:50:40 | name="stooge" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | assignedToPropName | name |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:33:50:40 | "stooge" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n       | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n       | contextSurroundingFunctionParameters | ()\n(?) |
| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n       | enclosingFunctionBody | Form onSubmit values $ #id html values stooge initialValues stooge larry employed false render handleSubmit form submitting pristine values form onSubmit handleSubmit \n         input type text name stooge \n       |
| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n       | enclosingFunctionName | App |
| autogenerated/Xss/XssThroughDom/forms.js:50:50:51:6 | \\n       | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:56:0 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | 'arguments' object of function plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | exceptional return of function plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | functio ... OT OK\\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:1:58:1 | return of function plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:10:56:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:56:22:56:22 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:5 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:5:57:33 | exceptional return of $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:7:57:11 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:14:57:17 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:19 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:26 | e.target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:19:57:32 | e.target.value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:21:57:26 | target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | contextSurroundingFunctionParameters | (e) |
| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | enclosingFunctionBody | e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | enclosingFunctionName | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:57:28:57:32 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:60:16 | plainReact | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:60:7:65:1 | plainRe ... form>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | 'arguments' object of function plainReact | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | () => ( ... form>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | exceptional return of function plainReact | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:60:20:65:1 | return of function plainReact | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n    < ... form>\\n) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n    < ... form>\\n) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n    < ... form>\\n) | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n    < ... form>\\n) | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:60:26:65:1 | (\\n    < ... form>\\n) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | <form o ... </form> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | <form o ... </form> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | <form o ... </form> | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | <form o ... </form> | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:5:64:11 | <form o ... </form> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:6:61:9 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:18 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:11:61:40 | onSubmi ... mit(e)} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:20 | plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:21 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | e => plainSubmit(e) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:21:61:39 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:36 | plainSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | exceptional return of plainSubmit(e) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:26:61:39 | plainSubmit(e) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | CalleeFlexibleAccessPath | plainSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:38:61:38 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n         | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n         | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:61:42:62:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | <input  ... nge} /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | <input  ... nge} /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | <input  ... nge} /> | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | <input  ... nge} /> | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:9:62:83 | <input  ... nge} /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:10:62:14 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:19 | type | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:16:62:26 | type="text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | assignedToPropName | type |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:21:62:26 | "text" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:32 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:28:62:51 | value={ ... .value} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:38 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:44 | this.state | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | assignedToPropName | value |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:35:62:50 | this.state.value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:40:62:44 | state | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:46:62:50 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:60 | onChange | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:53:62:80 | onChang ... Change} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:66 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | assignedToPropName | onChange |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:63:62:79 | this.handleChange | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:68:62:79 | handleChange | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n         | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n         | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:62:84:63:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | <input  ... mit" /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | <input  ... mit" /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | <input  ... mit" /> | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | <input  ... mit" /> | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:9:63:46 | <input  ... mit" /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:10:63:14 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:19 | type | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:16:63:28 | type="submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | assignedToPropName | type |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:21:63:28 | "submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:34 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:30:63:43 | value="Submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | assignedToPropName | value |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:36:63:43 | "Submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n     | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n     | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n     | enclosingFunctionBody | form onSubmit e plainSubmit e \n         input type text value state value onChange handleChange \n         input type submit value Submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n     | enclosingFunctionName | plainReact |
| autogenerated/Xss/XssThroughDom/forms.js:63:47:64:4 | \\n     | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import  ... -form'; | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import  ... -form'; | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:1:67:42 | import  ... -form'; | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:10:67:16 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:67:25:67:41 | 'react-hook-form' | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:69:0 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | 'arguments' object of function HookForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | exceptional return of function HookForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n  );\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n  );\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | functio ... \\n  );\\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:69:1:81:1 | return of function HookForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:69:10:69:17 | HookForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:42 | { regis ... rrors } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:9:70:54 | { regis ... eForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:11:70:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:21:70:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:35:70:40 | errors | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:52 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | exceptional return of useForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:70:46:70:54 | useForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:71:16 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n  } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n  } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n  } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n  } | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmi ... OK \\n  } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:9:73:3 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | 'arguments' object of function onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data)  ... OK \\n  } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data)  ... OK \\n  } | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data)  ... OK \\n  } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data)  ... OK \\n  } | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | (data)  ... OK \\n  } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | exceptional return of function onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:20:73:3 | return of function onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:71:21:71:24 | data | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:5 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:12 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:17 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | $("#id" ... a.name) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:5:72:28 | exceptional return of $("#id" ... a.name) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:7:72:11 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:14:72:17 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:22 | data | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:19:72:27 | data.name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | contextSurroundingFunctionParameters | ()\n(data) |
| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:72:24:72:27 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n    < ... rm>\\n  ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n    < ... rm>\\n  ) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n    < ... rm>\\n  ) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n    < ... rm>\\n  ) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:75:10:80:3 | (\\n    < ... rm>\\n  ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | <form o ... </form> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | <form o ... </form> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | <form o ... </form> | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | <form o ... </form> | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:5:79:11 | <form o ... </form> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:6:76:9 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:18 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:11:76:43 | onSubmi ... ubmit)} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:32 | handleSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | exceptional return of handleS ... Submit) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | assignedToPropName | onSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:21:76:42 | handleS ... Submit) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | CalleeFlexibleAccessPath | handleSubmit |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | calleeImports | react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:34:76:41 | onSubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n         | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n         | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:76:45:77:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | <input  ...  })} /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | <input  ...  })} /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | <input  ...  })} /> | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | <input  ...  })} /> | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:9:77:64 | <input  ...  })} /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:10:77:14 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:19 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:16:77:26 | name="name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | assignedToPropName | name |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:21:77:26 | "name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:30 | ref | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:28:77:61 | ref={re ... rue })} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:40 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | exceptional return of registe ... true }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | assignedToPropName | ref |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:33:77:60 | registe ... true }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | CalleeFlexibleAccessPath | register |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | calleeImports | react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:42:77:59 | { required: true } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:51 | required | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:44:77:57 | required: true | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | CalleeFlexibleAccessPath | register |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | InputAccessPathFromCallee | 0.required |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | assignedToPropName | required |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | calleeImports | react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:54:77:57 | true | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n         | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n         | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n         | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n         | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:77:65:78:8 | \\n         | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | <input  ... mit" /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | <input  ... mit" /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | <input  ... mit" /> | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | <input  ... mit" /> | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:9:78:31 | <input  ... mit" /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:10:78:14 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:19 | type | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:16:78:28 | type="submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | assignedToPropName | type |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:21:78:28 | "submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n     | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n     | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n     | enclosingFunctionBody | register handleSubmit errors useForm onSubmit data $ #id html data name form onSubmit handleSubmit onSubmit \n         input name name ref register required true \n         input type submit \n     |
| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n     | enclosingFunctionName | HookForm |
| autogenerated/Xss/XssThroughDom/forms.js:78:32:79:4 | \\n     | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:0 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:83:1 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | 'arguments' object of function HookForm2 | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | exceptional return of function HookForm2 | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n  );\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n  );\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | functio ... \\n  );\\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:83:1:99:1 | return of function HookForm2 | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:83:10:83:18 | HookForm2 | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:31 | { regis ... alues } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:9:84:43 | { regis ... eForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:11:84:18 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:21:84:29 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:41 | useForm | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | exceptional return of useForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:84:35:84:43 | useForm() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n    < ... rm>\\n  ) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n    < ... rm>\\n  ) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n    < ... rm>\\n  ) | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n    < ... rm>\\n  ) | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:86:10:98:3 | (\\n    < ... rm>\\n  ) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | <form>\\n ... </form> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | <form>\\n ... </form> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | <form>\\n ... </form> | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | <form>\\n ... </form> | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:87:5:97:11 | <form>\\n ... </form> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:87:6:87:9 | form | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n       | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n       | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n       | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n       | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:87:11:88:6 | \\n       | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | <input  ... ter} /> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | <input  ... ter} /> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | <input  ... ter} /> | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | <input  ... ter} /> | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:7:88:42 | <input  ... ter} /> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:8:88:12 | input | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:17 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:14:88:24 | name="name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | assignedToPropName | name |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:19:88:24 | "name" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:28 | ref | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:26:88:39 | ref={register} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | assignedToPropName | ref |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:31:88:38 | register | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n       | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n       | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n       | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n       | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:88:43:89:6 | \\n       | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 | <button ... button> | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 | <button ... button> | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 | <button ... button> | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 | <button ... button> | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:89:7:96:15 | <button ... button> | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:89:8:89:13 | button | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:89:8:89:13 | button | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:89:8:89:13 | button | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:89:8:89:13 | button | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:89:8:89:13 | button | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:12 | type | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:12 | type | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:12 | type | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:12 | type | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:12 | type | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:90:9:90:21 | type="button" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | assignedToPropName | type |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:90:14:90:21 | "button" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:91:15 | onClick | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:91:15 | onClick | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:91:15 | onClick | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:91:15 | onClick | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:91:15 | onClick | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:9:94:10 | onClick ...      }} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:91:17 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:91:17 | getValues | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:91:17 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:91:17 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:91:17 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | 'arguments' object of anonymous function | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | 'arguments' object of anonymous function | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | assignedToPropName | onClick |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | () => { ...       } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | exceptional return of anonymous function | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | exceptional return of anonymous function | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | return of anonymous function | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | return of anonymous function | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:91:18:94:9 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:22 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:22 | values | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:22 | values | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:22 | values | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:22 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values = getValues() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values = getValues() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values = getValues() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values = getValues() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:17:92:36 | values = getValues() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:34 | getValues | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:34 | getValues | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:34 | getValues | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:34 | getValues | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:34 | getValues | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | exceptional return of getValues() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | exceptional return of getValues() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | exceptional return of getValues() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | exceptional return of getValues() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | exceptional return of getValues() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | getValues() | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | getValues() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | getValues() | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | getValues() | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:92:26:92:36 | getValues() | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:11 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:11 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:11 | $ | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:11 | $ | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:11 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | $("#id") | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | $("#id") | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | $("#id") | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | exceptional return of $("#id") | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | exceptional return of $("#id") | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:18 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:23 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:23 | $("#id").html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:23 | $("#id").html | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:23 | $("#id").html | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:23 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | $("#id" ... s.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | $("#id" ... s.name) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | $("#id" ... s.name) | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | $("#id" ... s.name) | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | $("#id" ... s.name) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | exceptional return of $("#id" ... s.name) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | exceptional return of $("#id" ... s.name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | exceptional return of $("#id" ... s.name) | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | exceptional return of $("#id" ... s.name) | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:11:93:36 | exceptional return of $("#id" ... s.name) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:13:93:17 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:20:93:23 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:20:93:23 | html | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:20:93:23 | html | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:20:93:23 | html | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:20:93:23 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:30 | values | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:30 | values | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:30 | values | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:30 | values | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:30 | values | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:25:93:35 | values.name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:93:32:93:35 | name | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:93:32:93:35 | name | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/forms.js:93:32:93:35 | name | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:93:32:93:35 | name | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:93:32:93:35 | name | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:95:8:96:6 | \\n       | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:95:8:96:6 | \\n       | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:95:8:96:6 | \\n       | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:95:8:96:6 | \\n       | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:95:8:96:6 | \\n       | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:96:16:97:4 | \\n     | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:96:16:97:4 | \\n     | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:96:16:97:4 | \\n     | enclosingFunctionBody | register getValues useForm form \n       input name name ref register \n       button type button onClick values getValues $ #id html values name \n       \n     |
| autogenerated/Xss/XssThroughDom/forms.js:96:16:97:4 | \\n     | enclosingFunctionName | HookForm2 |
| autogenerated/Xss/XssThroughDom/forms.js:96:16:97:4 | \\n     | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:101:0 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:101:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:101:0 | this | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:101:0 | this | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:101:0 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | 'arguments' object of function vanillaJS | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | 'arguments' object of function vanillaJS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | 'arguments' object of function vanillaJS | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | 'arguments' object of function vanillaJS | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | 'arguments' object of function vanillaJS | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | exceptional return of function vanillaJS | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | exceptional return of function vanillaJS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | exceptional return of function vanillaJS | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | exceptional return of function vanillaJS | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | exceptional return of function vanillaJS | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | functio ...     }\\n} | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | functio ...     }\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | functio ...     }\\n} | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | return of function vanillaJS | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | return of function vanillaJS | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | return of function vanillaJS | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | return of function vanillaJS | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:101:1:109:1 | return of function vanillaJS | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:101:10:101:18 | vanillaJS | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:101:10:101:18 | vanillaJS | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:101:10:101:18 | vanillaJS | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:12 | document | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:12 | document | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:12 | document | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:12 | document | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:26 | documen ... elector | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:26 | documen ... elector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:26 | documen ... elector | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:26 | documen ... elector | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:26 | documen ... elector | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | documen ... yform") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | documen ... yform") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | documen ... yform") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | documen ... yform") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | documen ... yform") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | exceptional return of documen ... yform") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | exceptional return of documen ... yform") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | exceptional return of documen ... yform") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | exceptional return of documen ... yform") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:41 | exceptional return of documen ... yform") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:58 | documen ... istener | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:58 | documen ... istener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:58 | documen ... istener | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:58 | documen ... istener | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:102:58 | documen ... istener | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | documen ... \\n    }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | documen ... \\n    }) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | documen ... \\n    }) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | documen ... \\n    }) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | documen ... \\n    }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | exceptional return of documen ... \\n    }) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | exceptional return of documen ... \\n    }) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | exceptional return of documen ... \\n    }) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | exceptional return of documen ... \\n    }) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:5:104:6 | exceptional return of documen ... \\n    }) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:14:102:26 | querySelector | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:14:102:26 | querySelector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:14:102:26 | querySelector | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:14:102:26 | querySelector | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:14:102:26 | querySelector | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:28:102:40 | "form.myform" | receiverName | document |
| autogenerated/Xss/XssThroughDom/forms.js:102:43:102:58 | addEventListener | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:43:102:58 | addEventListener | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:43:102:58 | addEventListener | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:43:102:58 | addEventListener | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:43:102:58 | addEventListener | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | CalleeFlexibleAccessPath | document.querySelector().addEventListener |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:60:102:67 | "submit" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:102:70 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | 'arguments' object of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | 'arguments' object of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | CalleeFlexibleAccessPath | document.querySelector().addEventListener |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | e => {\\n ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | exceptional return of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | exceptional return of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | return of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | return of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:102:70:104:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:9 | $ | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:9 | $ | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:9 | $ | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:9 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | $("#id") | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | $("#id") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | $("#id") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | exceptional return of $("#id") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | exceptional return of $("#id") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:21 | $("#id").html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:21 | $("#id").html | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:21 | $("#id").html | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | $("#id" ... .value) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | $("#id" ... .value) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | $("#id" ... .value) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | exceptional return of $("#id" ... .value) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | exceptional return of $("#id" ... .value) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:9:103:37 | exceptional return of $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:11:103:15 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:18:103:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:18:103:21 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:18:103:21 | html | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:18:103:21 | html | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:18:103:21 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:23 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:23 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:23 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:23 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:23 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:30 | e.target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:30 | e.target | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:30 | e.target | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:30 | e.target | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:30 | e.target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:23:103:36 | e.target.value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:25:103:30 | target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:25:103:30 | target | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:25:103:30 | target | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:25:103:30 | target | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:25:103:30 | target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:103:32:103:36 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:103:32:103:36 | value | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:103:32:103:36 | value | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:103:32:103:36 | value | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:103:32:103:36 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:12 | document | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:12 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:12 | document | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:12 | document | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:12 | document | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:26 | documen ... elector | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:26 | documen ... elector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:26 | documen ... elector | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:26 | documen ... elector | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:26 | documen ... elector | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | documen ... yform") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | documen ... yform") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | documen ... yform") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | documen ... yform") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | documen ... yform") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | exceptional return of documen ... yform") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | exceptional return of documen ... yform") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | exceptional return of documen ... yform") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | exceptional return of documen ... yform") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:41 | exceptional return of documen ... yform") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:50 | documen ... nsubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:50 | documen ... nsubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:50 | documen ... nsubmit | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:50 | documen ... nsubmit | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:106:50 | documen ... nsubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:108:5 | documen ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:108:5 | documen ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:108:5 | documen ... K\\n    } | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:108:5 | documen ... K\\n    } | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:5:108:5 | documen ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:14:106:26 | querySelector | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:14:106:26 | querySelector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:14:106:26 | querySelector | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:14:106:26 | querySelector | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:14:106:26 | querySelector | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | CalleeFlexibleAccessPath | document.querySelector |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:28:106:40 | "form.myform" | receiverName | document |
| autogenerated/Xss/XssThroughDom/forms.js:106:43:106:50 | onsubmit | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:43:106:50 | onsubmit | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/forms.js:106:43:106:50 | onsubmit | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:43:106:50 | onsubmit | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:43:106:50 | onsubmit | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:106:53 | this | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:106:53 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:106:53 | this | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:106:53 | this | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:106:53 | this | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | 'arguments' object of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | 'arguments' object of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | 'arguments' object of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | exceptional return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | exceptional return of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | exceptional return of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | exceptional return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | assignedToPropName | onsubmit |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | functio ... K\\n    } | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | return of anonymous function | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | return of anonymous function | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | return of anonymous function | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:54:108:5 | return of anonymous function | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:106:64:106:64 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:9 | $ | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:9 | $ | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:9 | $ | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:9 | $ | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:9 | $ | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | $("#id") | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | $("#id") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | $("#id") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | exceptional return of $("#id") | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | exceptional return of $("#id") | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | exceptional return of $("#id") | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:16 | exceptional return of $("#id") | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:21 | $("#id").html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:21 | $("#id").html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:21 | $("#id").html | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:21 | $("#id").html | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:21 | $("#id").html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | $("#id" ... .value) | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | $("#id" ... .value) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | $("#id" ... .value) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | exceptional return of $("#id" ... .value) | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | exceptional return of $("#id" ... .value) | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:9:107:37 | exceptional return of $("#id" ... .value) | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:11:107:15 | "#id" | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:18:107:21 | html | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:18:107:21 | html | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:18:107:21 | html | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:18:107:21 | html | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:18:107:21 | html | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:23 | e | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:23 | e | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:23 | e | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:23 | e | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:23 | e | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:30 | e.target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:30 | e.target | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:30 | e.target | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:30 | e.target | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:30 | e.target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:23:107:36 | e.target.value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:25:107:30 | target | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:25:107:30 | target | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:25:107:30 | target | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:25:107:30 | target | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:25:107:30 | target | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/forms.js:107:32:107:36 | value | contextFunctionInterfaces | App()\nFormikBasic()\nHookForm()\nHookForm2()\nhandleSubmit(values, ?)\nmapPropsToValues()\nonSubmit(data)\nonsubmit(e)\nplainReact()\nplainSubmit(e)\nvalidate(values)\nvanillaJS() |
| autogenerated/Xss/XssThroughDom/forms.js:107:32:107:36 | value | contextSurroundingFunctionParameters | ()\n(e) |
| autogenerated/Xss/XssThroughDom/forms.js:107:32:107:36 | value | enclosingFunctionBody | document querySelector form.myform addEventListener submit e $ #id html e target value document querySelector form.myform onsubmit e $ #id html e target value |
| autogenerated/Xss/XssThroughDom/forms.js:107:32:107:36 | value | enclosingFunctionName | vanillaJS |
| autogenerated/Xss/XssThroughDom/forms.js:107:32:107:36 | value | fileImports | formik react react-final-form react-hook-form |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:0 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:0 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | cashDom | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | cashDom | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | cashDom | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | require | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:1:1 | require | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:2 | (functi ... .\\n\\t}\\n}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:2 | (functi ... .\\n\\t}\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:2 | (functi ... .\\n\\t}\\n}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | (functi ... \\t}\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | (functi ... \\t}\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | (functi ... \\t}\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | exceptional return of (functi ... \\t}\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | exceptional return of (functi ... \\t}\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:1:98:4 | exceptional return of (functi ... \\t}\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | require | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | require | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | require | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:1:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | functio ... K.\\n\\t}\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | functio ... K.\\n\\t}\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | functio ... K.\\n\\t}\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:1:2:98:1 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | $("#id" ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | $("#id" ... .val()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | $("#id" ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | $("#id" ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | exceptional return of $("#id" ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | exceptional return of $("#id" ... .val()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | exceptional return of $("#id" ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:2:2:35 | exceptional return of $("#id" ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:4:2:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:11:2:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:11:2:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:11:2:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:11:2:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:28 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:32 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:32 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:32 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:32 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | exceptional return of $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | exceptional return of $("textarea").val() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | exceptional return of $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:16:2:34 | exceptional return of $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:18:2:27 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:30:2:32 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:30:2:32 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:30:2:32 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:2:30:2:32 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | $("#id" ... text()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | $("#id" ... text()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | $("#id" ... text()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | $("#id" ... text()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | exceptional return of $("#id" ... text()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | exceptional return of $("#id" ... text()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | exceptional return of $("#id" ... text()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:2:4:41 | exceptional return of $("#id" ... text()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:4:4:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:11:4:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:11:4:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:11:4:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:11:4:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | $(".some-element") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | exceptional return of $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | exceptional return of $(".some-element") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | exceptional return of $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:33 | exceptional return of $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:38 | $(".som ... ").text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:38 | $(".som ... ").text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:38 | $(".som ... ").text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:38 | $(".som ... ").text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | $(".som ... .text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | exceptional return of $(".som ... .text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | exceptional return of $(".som ... .text() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | exceptional return of $(".som ... .text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:16:4:40 | exceptional return of $(".som ... .text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:18:4:32 | ".some-element" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:35:4:38 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:35:4:38 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:35:4:38 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:4:35:4:38 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | $("#id" ... "bar")) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | $("#id" ... "bar")) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | $("#id" ... "bar")) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | $("#id" ... "bar")) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | exceptional return of $("#id" ... "bar")) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | exceptional return of $("#id" ... "bar")) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | exceptional return of $("#id" ... "bar")) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:2:6:53 | exceptional return of $("#id" ... "bar")) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:4:6:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:11:6:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:11:6:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:11:6:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:11:6:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | $(".some-element") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | exceptional return of $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | exceptional return of $(".some-element") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | exceptional return of $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:33 | exceptional return of $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:38 | $(".som ... ").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:38 | $(".som ... ").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:38 | $(".som ... ").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:38 | $(".som ... ").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | $(".som ...  "bar") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | exceptional return of $(".som ...  "bar") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | exceptional return of $(".som ...  "bar") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | exceptional return of $(".som ...  "bar") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:16:6:52 | exceptional return of $(".som ...  "bar") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:18:6:32 | ".some-element" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:35:6:38 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:35:6:38 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:35:6:38 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:35:6:38 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:40:6:44 | "foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:6:47:6:51 | "bar" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | $("#id" ... bar"})) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | $("#id" ... bar"})) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | $("#id" ... bar"})) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | $("#id" ... bar"})) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | exceptional return of $("#id" ... bar"})) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | exceptional return of $("#id" ... bar"})) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | exceptional return of $("#id" ... bar"})) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:2:7:55 | exceptional return of $("#id" ... bar"})) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:4:7:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:11:7:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:11:7:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:11:7:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:11:7:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | $(".some-element") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | exceptional return of $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | exceptional return of $(".some-element") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | exceptional return of $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:33 | exceptional return of $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:38 | $(".som ... ").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:38 | $(".som ... ").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:38 | $(".som ... ").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:38 | $(".som ... ").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | $(".som ... "bar"}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | exceptional return of $(".som ... "bar"}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | exceptional return of $(".som ... "bar"}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | exceptional return of $(".som ... "bar"}) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:16:7:54 | exceptional return of $(".som ... "bar"}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:18:7:32 | ".some-element" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:35:7:38 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:35:7:38 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:35:7:38 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:35:7:38 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:40:7:53 | {"foo": "bar"} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:45 | "foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:45 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:45 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:45 | "foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:41:7:52 | "foo": "bar" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | InputAccessPathFromCallee | 0.foo |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | assignedToPropName | foo |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:7:48:7:52 | "bar" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | $("#id" ... rget")) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | $("#id" ... rget")) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | $("#id" ... rget")) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | $("#id" ... rget")) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | exceptional return of $("#id" ... rget")) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | exceptional return of $("#id" ... rget")) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | exceptional return of $("#id" ... rget")) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:2:8:54 | exceptional return of $("#id" ... rget")) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:4:8:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:11:8:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:11:8:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:11:8:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:11:8:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | $(".some-element") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | exceptional return of $(".some-element") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | exceptional return of $(".some-element") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | exceptional return of $(".some-element") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:33 | exceptional return of $(".some-element") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:38 | $(".som ... ").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:38 | $(".som ... ").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:38 | $(".som ... ").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:38 | $(".som ... ").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | $(".som ... arget") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | exceptional return of $(".som ... arget") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | exceptional return of $(".som ... arget") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | exceptional return of $(".som ... arget") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:16:8:53 | exceptional return of $(".som ... arget") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:18:8:32 | ".some-element" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:35:8:38 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:35:8:38 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:35:8:38 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:35:8:38 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:8:40:8:52 | "data-target" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:10:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | $("#id" ... OK.\\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | $("#id" ... OK.\\t\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | $("#id" ... OK.\\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | $("#id" ... OK.\\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | exceptional return of $("#id" ... OK.\\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | exceptional return of $("#id" ... OK.\\t\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | exceptional return of $("#id" ... OK.\\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:2:12:2 | exceptional return of $("#id" ... OK.\\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:4:10:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:11:10:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:11:10:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:11:10:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:10:11:10:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:10 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:10 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:10 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:25 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:25 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:25 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:25 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | documen ... ("foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | exceptional return of documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | exceptional return of documen ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | exceptional return of documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:32 | exceptional return of documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:3:11:42 | documen ... nerText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:12:11:25 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:12:11:25 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:12:11:25 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:12:11:25 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:27:11:31 | "foo" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:34:11:42 | innerText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:34:11:42 | innerText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:34:11:42 | innerText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:11:34:11:42 | innerText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:14:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | $("#id" ... S. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | $("#id" ... S. \\t\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | $("#id" ... S. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | $("#id" ... S. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | exceptional return of $("#id" ... S. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | exceptional return of $("#id" ... S. \\t\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | exceptional return of $("#id" ... S. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:2:16:2 | exceptional return of $("#id" ... S. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:4:14:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:11:14:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:11:14:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:11:14:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:14:11:14:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:10 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:10 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:10 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:25 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:25 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:25 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:25 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | documen ... ("foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | exceptional return of documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | exceptional return of documen ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | exceptional return of documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:32 | exceptional return of documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:3:15:42 | documen ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:12:15:25 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:12:15:25 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:12:15:25 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:12:15:25 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:27:15:31 | "foo" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:34:15:42 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:34:15:42 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:34:15:42 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:15:34:15:42 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:18:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | $("#id" ... K. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | $("#id" ... K. \\t\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | $("#id" ... K. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | $("#id" ... K. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:2:20:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:4:18:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:11:18:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:11:18:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:11:18:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:18:11:18:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:10 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:10 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:10 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:25 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:25 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:25 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:25 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | documen ... ("foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | exceptional return of documen ... ("foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | exceptional return of documen ... ("foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | exceptional return of documen ... ("foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:32 | exceptional return of documen ... ("foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:3:19:44 | documen ... Content | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:12:19:25 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:12:19:25 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:12:19:25 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:12:19:25 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:27:19:31 | "foo" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:34:19:44 | textContent | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:34:19:44 | textContent | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:34:19:44 | textContent | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:19:34:19:44 | textContent | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:22:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | $("#id" ... K. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | $("#id" ... K. \\t\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | $("#id" ... K. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | $("#id" ... K. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:2:24:2 | exceptional return of $("#id" ... K. \\t\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:4:22:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:11:22:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:11:22:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:11:22:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:22:11:22:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:10 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:10 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:10 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:27 | documen ... ctorAll | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:27 | documen ... ctorAll | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:27 | documen ... ctorAll | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:27 | documen ... ctorAll | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | documen ... tarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | documen ... tarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | documen ... tarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | documen ... tarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | exceptional return of documen ... tarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | exceptional return of documen ... tarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | exceptional return of documen ... tarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:39 | exceptional return of documen ... tarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:42 | documen ... ea")[0] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:42 | documen ... ea")[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:42 | documen ... ea")[0] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:42 | documen ... ea")[0] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:3:23:48 | documen ... ].value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:12:23:27 | querySelectorAll | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:12:23:27 | querySelectorAll | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:12:23:27 | querySelectorAll | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:12:23:27 | querySelectorAll | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | CalleeFlexibleAccessPath | document.querySelectorAll |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:29:23:38 | "textarea" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:41:23:41 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:41:23:41 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:41:23:41 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:41:23:41 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:44:23:48 | value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:44:23:48 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:44:23:48 | value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:23:44:23:48 | value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:26:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | $("#id" ... T OK\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | $("#id" ... T OK\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | $("#id" ... T OK\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | $("#id" ... T OK\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | exceptional return of $("#id" ... T OK\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | exceptional return of $("#id" ... T OK\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | exceptional return of $("#id" ... T OK\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:2:28:2 | exceptional return of $("#id" ... T OK\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:4:26:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:11:26:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:11:26:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:11:26:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:26:11:26:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:10 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:10 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:10 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:10 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:25 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:25 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:25 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:25 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | documen ... 'div1') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | documen ... 'div1') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | documen ... 'div1') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | documen ... 'div1') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | exceptional return of documen ... 'div1') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | exceptional return of documen ... 'div1') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | exceptional return of documen ... 'div1') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:33 | exceptional return of documen ... 'div1') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:46 | documen ... tribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:46 | documen ... tribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:46 | documen ... tribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:46 | documen ... tribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | documen ... arget') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | exceptional return of documen ... arget') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | exceptional return of documen ... arget') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | exceptional return of documen ... arget') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:3:27:61 | exceptional return of documen ... arget') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:12:27:25 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:12:27:25 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:12:27:25 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:12:27:25 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:27:27:32 | 'div1' | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:35:27:46 | getAttribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:35:27:46 | getAttribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:35:27:46 | getAttribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:35:27:46 | getAttribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | CalleeFlexibleAccessPath | document.getElementById().getAttribute |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:27:48:27:60 | 'data-target' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:30:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:30:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:30:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:30:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | 'arguments' object of function safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | 'arguments' object of function safe1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | 'arguments' object of function safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | 'arguments' object of function safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | exceptional return of function safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | exceptional return of function safe1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | exceptional return of function safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | exceptional return of function safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | functio ... \\t\\t \\t\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | functio ... \\t\\t \\t\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | functio ... \\t\\t \\t\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | functio ... \\t\\t \\t\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | return of function safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | return of function safe1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | return of function safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:2:35:2 | return of function safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:11:30:15 | safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:30:17:30:17 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:7 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:7 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:7 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:14 | x.jquery | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:14 | x.jquery | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:14 | x.jquery | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:7:31:14 | x.jquery | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:9:31:14 | jquery | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:9:31:14 | jquery | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:9:31:14 | jquery | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:31:9:31:14 | jquery | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:10 | foo | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:10 | foo | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:10 | foo | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:10 | foo | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:17 | foo = $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:17 | foo = $(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:17 | foo = $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:8:32:17 | foo = $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:14 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:14 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:14 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:14 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | $(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | exceptional return of $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | exceptional return of $(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | exceptional return of $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:14:32:17 | exceptional return of $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:32:16:32:16 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:6 | safe1 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:6 | safe1 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:6 | safe1 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:6 | safe1 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | exceptional return of safe1($ ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | exceptional return of safe1($ ... .val()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | exceptional return of safe1($ ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | exceptional return of safe1($ ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | safe1($ ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | safe1($ ... .val()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | safe1($ ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:2:36:27 | safe1($ ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:8 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:8 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:8 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:8 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:20 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:24 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:24 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:24 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:24 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | CalleeFlexibleAccessPath | safe1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | exceptional return of $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | exceptional return of $("textarea").val() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | exceptional return of $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:8:36:26 | exceptional return of $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:10:36:19 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:22:36:24 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:22:36:24 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:22:36:24 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:36:22:36:24 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:38:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:38:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:38:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:38:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | 'arguments' object of function safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | 'arguments' object of function safe2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | 'arguments' object of function safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | 'arguments' object of function safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | exceptional return of function safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | exceptional return of function safe2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | exceptional return of function safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | exceptional return of function safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | functio ... \\t} \\t\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | functio ... \\t} \\t\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | functio ... \\t} \\t\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | functio ... \\t} \\t\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | return of function safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | return of function safe2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | return of function safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:2:42:2 | return of function safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:11:38:15 | safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:38:17:38:17 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:14 | typeof x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:14 | typeof x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:14 | typeof x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:14 | typeof x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | typeof  ... object" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | typeof  ... object" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | typeof  ... object" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | typeof  ... object" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | x | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:7:39:27 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:14:39:14 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:14:39:14 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:14:39:14 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:14:39:14 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:20:39:27 | "object" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:20:39:27 | "object" | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:20:39:27 | "object" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:39:20:39:27 | "object" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:10 | foo | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:10 | foo | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:10 | foo | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:10 | foo | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:17 | foo = $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:17 | foo = $(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:17 | foo = $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:8:40:17 | foo = $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:14 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:14 | $ | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:14 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:14 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | $(x) | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | exceptional return of $(x) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | exceptional return of $(x) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | exceptional return of $(x) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:14:40:17 | exceptional return of $(x) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:40:16:40:16 | x | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:6 | safe2 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:6 | safe2 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:6 | safe2 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:6 | safe2 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | exceptional return of safe2($ ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | exceptional return of safe2($ ... .val()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | exceptional return of safe2($ ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | exceptional return of safe2($ ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | safe2($ ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | safe2($ ... .val()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | safe2($ ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:2:43:27 | safe2($ ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:8 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:8 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:8 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:8 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:20 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:24 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:24 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:24 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:24 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | CalleeFlexibleAccessPath | safe2 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | exceptional return of $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | exceptional return of $("textarea").val() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | exceptional return of $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:8:43:26 | exceptional return of $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:10:43:19 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:22:43:24 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:22:43:24 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:22:43:24 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:43:22:43:24 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:46:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | $("#id" ... ery.\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | $("#id" ... ery.\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | $("#id" ... ery.\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | $("#id" ... ery.\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | exceptional return of $("#id" ... ery.\\n\\t) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | exceptional return of $("#id" ... ery.\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | exceptional return of $("#id" ... ery.\\n\\t) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:2:48:2 | exceptional return of $("#id" ... ery.\\n\\t) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:4:46:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:11:46:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:11:46:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:11:46:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:46:11:46:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:3 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:3 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | $("<p>" ... "</p>") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | $("<p>" ... "</p>") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | $("<p>" ... "</p>") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | $("<p>" ... "</p>") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | exceptional return of $("<p>" ... "</p>") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | exceptional return of $("<p>" ... "</p>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | exceptional return of $("<p>" ... "</p>") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:33 | exceptional return of $("<p>" ... "</p>") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:38 | $("<p>" ... ").text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:38 | $("<p>" ... ").text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:38 | $("<p>" ... ").text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:38 | $("<p>" ... ").text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | $("<p>" ... .text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | exceptional return of $("<p>" ... .text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | exceptional return of $("<p>" ... .text() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | exceptional return of $("<p>" ... .text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:3:47:40 | exceptional return of $("<p>" ... .text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:9 | "<p>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:9 | "<p>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:9 | "<p>" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:9 | "<p>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:9 | "<p>" | stringConcatenatedWith |  -endpoint- something() + '</p>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:23 | "<p>" + something() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:23 | "<p>" + something() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:23 | "<p>" + something() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:23 | "<p>" + something() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:5:47:32 | "<p>" + ...  "</p>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:21 | something | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:21 | something | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:21 | something | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:21 | something | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | exceptional return of something() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | exceptional return of something() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | exceptional return of something() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | something() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | something() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | something() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | something() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:13:47:23 | something() | stringConcatenatedWith | '<p>' -endpoint- '</p>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:27:47:32 | "</p>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:27:47:32 | "</p>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:27:47:32 | "</p>" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:27:47:32 | "</p>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:27:47:32 | "</p>" | stringConcatenatedWith | '<p>' + something() -endpoint-  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:35:47:38 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:35:47:38 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:35:47:38 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:47:35:47:38 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:48 | $("#id" ... ).val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:48 | $("#id" ... ).val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:48 | $("#id" ... ).val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:2:51:48 | $("#id" ... ).val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:4:51:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:11:51:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:11:51:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:11:51:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:11:51:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:15:51:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:18:51:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:18:51:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:18:51:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:18:51:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:30 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:30 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:30 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:30 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:42 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:46 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:46 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:46 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:46 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | $("textarea").val() | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | $("textarea").val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | exceptional return of $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | exceptional return of $("textarea").val() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | exceptional return of $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:30:51:48 | exceptional return of $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:32:51:41 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:44:51:46 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:44:51:46 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:44:51:46 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:51:44:51:46 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:9 | base | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:9 | base | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:9 | base | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:9 | base | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base = $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base = $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base = $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:6:53:20 | base = $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:13 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:13 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:13 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:13 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:13:53:20 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:53:15:53:19 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:5 | base | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:5 | base | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:5 | base | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:5 | base | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:29 | base[ht ... 'text'] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:29 | base[ht ... 'text'] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:29 | base[ht ... 'text'] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:29 | base[ht ... 'text'] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | base[ht ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | base[ht ... .val()) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | base[ht ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | base[ht ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | exceptional return of base[ht ... .val()) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | exceptional return of base[ht ... .val()) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | exceptional return of base[ht ... .val()) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:2:54:50 | exceptional return of base[ht ... .val()) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:10 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:10 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:10 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:10 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:28 | html ?  ...  'text' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:28 | html ?  ...  'text' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:28 | html ?  ...  'text' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:7:54:28 | html ?  ...  'text' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:14:54:19 | 'html' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:14:54:19 | 'html' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:14:54:19 | 'html' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:14:54:19 | 'html' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:23:54:28 | 'text' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:23:54:28 | 'text' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:23:54:28 | 'text' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:23:54:28 | 'text' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:31 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:31 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:31 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:31 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:43 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:47 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:47 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:47 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:47 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | CalleeFlexibleAccessPath | base.? |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | $("textarea").val() | receiverName | base |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | exceptional return of $("textarea").val() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | exceptional return of $("textarea").val() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | exceptional return of $("textarea").val() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:31:54:49 | exceptional return of $("textarea").val() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:33:54:42 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:45:54:47 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:45:54:47 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:45:54:47 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:54:45:54:47 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:51 | $("#id" ... 0).name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:51 | $("#id" ... 0).name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:51 | $("#id" ... 0).name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:2:56:51 | $("#id" ... 0).name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:4:56:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:11:56:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:11:56:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:11:56:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:11:56:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:15:56:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:18:56:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:18:56:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:18:56:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:18:56:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:30 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:30 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:30 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:30 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | $("input") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | exceptional return of $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | exceptional return of $("input") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | exceptional return of $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:39 | exceptional return of $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:43 | $("input").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:43 | $("input").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:43 | $("input").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:43 | $("input").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | $("input").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | exceptional return of $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | exceptional return of $("input").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | exceptional return of $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:46 | exceptional return of $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:51 | $("inpu ... 0).name | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:51 | $("inpu ... 0).name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:51 | $("inpu ... 0).name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:51 | $("inpu ... 0).name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:30:56:51 | $("inpu ... 0).name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:32:56:38 | "input" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:41:56:43 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:41:56:43 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:41:56:43 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:41:56:43 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:45:56:45 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:48:56:51 | name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:48:56:51 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:48:56:51 | name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:56:48:56:51 | name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:67 | $("#id" ... "name") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:67 | $("#id" ... "name") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:67 | $("#id" ... "name") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:2:57:67 | $("#id" ... "name") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:4:57:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:11:57:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:11:57:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:11:57:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:11:57:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:15:57:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:18:57:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:18:57:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:18:57:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:18:57:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:30 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:30 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:30 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:30 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | $("input") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | exceptional return of $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | exceptional return of $("input") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | exceptional return of $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:39 | exceptional return of $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:43 | $("input").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:43 | $("input").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:43 | $("input").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:43 | $("input").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | $("input").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | exceptional return of $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | exceptional return of $("input").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | exceptional return of $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:46 | exceptional return of $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:59 | $("inpu ... tribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:59 | $("inpu ... tribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:59 | $("inpu ... tribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:59 | $("inpu ... tribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | $("inpu ... "name") | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | $("inpu ... "name") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | $("inpu ... "name") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | $("inpu ... "name") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | $("inpu ... "name") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | exceptional return of $("inpu ... "name") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | exceptional return of $("inpu ... "name") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | exceptional return of $("inpu ... "name") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:30:57:67 | exceptional return of $("inpu ... "name") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:32:57:38 | "input" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:41:57:43 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:41:57:43 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:41:57:43 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:41:57:43 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:45:57:45 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:48:57:59 | getAttribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:48:57:59 | getAttribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:48:57:59 | getAttribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:48:57:59 | getAttribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | CalleeFlexibleAccessPath | $().get().getAttribute |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:57:61:57:66 | "name" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:58 | $("#id" ... e("id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:58 | $("#id" ... e("id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:58 | $("#id" ... e("id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:2:59:58 | $("#id" ... e("id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:4:59:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:11:59:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:11:59:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:11:59:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:11:59:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:15:59:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:18:59:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:18:59:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:18:59:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:18:59:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:30 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:30 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:30 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:30 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | $("input") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | exceptional return of $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | exceptional return of $("input") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | exceptional return of $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:39 | exceptional return of $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:52 | $("inpu ... tribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:52 | $("inpu ... tribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:52 | $("inpu ... tribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:52 | $("inpu ... tribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | $("inpu ... e("id") | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | $("inpu ... e("id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | $("inpu ... e("id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | $("inpu ... e("id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | $("inpu ... e("id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | exceptional return of $("inpu ... e("id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | exceptional return of $("inpu ... e("id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | exceptional return of $("inpu ... e("id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:30:59:58 | exceptional return of $("inpu ... e("id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:32:59:38 | "input" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:41:59:52 | getAttribute | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:41:59:52 | getAttribute | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:41:59:52 | getAttribute | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:41:59:52 | getAttribute | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | CalleeFlexibleAccessPath | $().getAttribute |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:59:54:59:57 | "id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:69 | $("#id" ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:69 | $("#id" ... value") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:69 | $("#id" ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:2:61:69 | $("#id" ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:4:61:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:11:61:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:11:61:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:11:61:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:11:61:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:15:61:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:18:61:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:18:61:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:18:61:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:18:61:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:30 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:30 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:30 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:30 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | $(document) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | $(document) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | $(document) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | exceptional return of $(document) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:40 | exceptional return of $(document) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:45 | $(document).find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:45 | $(document).find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:45 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:45 | $(document).find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | $(docum ... ption") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | $(docum ... ption") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | $(docum ... ption") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | $(docum ... ption") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | exceptional return of $(docum ... ption") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | exceptional return of $(docum ... ption") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | exceptional return of $(docum ... ption") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:55 | exceptional return of $(docum ... ption") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:60 | $(docum ... ").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:60 | $(docum ... ").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:60 | $(docum ... ").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:60 | $(docum ... ").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | $(docum ... value") | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | $(docum ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | $(docum ... value") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | $(docum ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | $(docum ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | exceptional return of $(docum ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | exceptional return of $(docum ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | exceptional return of $(docum ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:30:61:69 | exceptional return of $(docum ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:32:61:39 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:42:61:45 | find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:42:61:45 | find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:42:61:45 | find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:42:61:45 | find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:47:61:54 | "option" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:57:61:60 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:57:61:60 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:57:61:60 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:57:61:60 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | CalleeFlexibleAccessPath | $().find().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:61:62:61:68 | "value" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:14 | valMethod | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:14 | valMethod | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:14 | valMethod | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:14 | valMethod | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMeth ... a").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMeth ... a").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMeth ... a").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMeth ... a").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMethod | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMethod | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMethod | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:6:63:34 | valMethod | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:18 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:18 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:18 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:18 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:30 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:34 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:34 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:34 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:18:63:34 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:20:63:29 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:32:63:34 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:32:63:34 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:32:63:34 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:63:32:63:34 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:13 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:13 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:13 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:13 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:16 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:26 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:26 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:26 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:26 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:40 | $("#id" ... ethod() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:40 | $("#id" ... ethod() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:40 | $("#id" ... ethod() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:2:64:40 | $("#id" ... ethod() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:4:64:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:11:64:13 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:11:64:13 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:11:64:13 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:11:64:13 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:15:64:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:18:64:26 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:18:64:26 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:18:64:26 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:18:64:26 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:38 | valMethod | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:38 | valMethod | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:38 | valMethod | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:38 | valMethod | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | exceptional return of valMethod() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | exceptional return of valMethod() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | exceptional return of valMethod() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | exceptional return of valMethod() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | valMethod() | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | valMethod() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | valMethod() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | valMethod() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:64:30:64:40 | valMethod() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:12 | myValue | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:12 | myValue | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:12 | myValue | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:12 | myValue | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue ... value") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:6:66:55 | myValue ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | $(document) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | $(document) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | $(document) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | $(document) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | exceptional return of $(document) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | exceptional return of $(document) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | exceptional return of $(document) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:26 | exceptional return of $(document) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:31 | $(document).find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:31 | $(document).find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:31 | $(document).find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:31 | $(document).find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | $(docum ... ption") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | $(docum ... ption") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | $(docum ... ption") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | $(docum ... ption") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | exceptional return of $(docum ... ption") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | exceptional return of $(docum ... ption") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | exceptional return of $(docum ... ption") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:41 | exceptional return of $(docum ... ption") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:46 | $(docum ... ").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:46 | $(docum ... ").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:46 | $(docum ... ").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:46 | $(docum ... ").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | $(docum ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | $(docum ... value") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | $(docum ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | $(docum ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | exceptional return of $(docum ... value") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | exceptional return of $(docum ... value") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | exceptional return of $(docum ... value") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:16:66:55 | exceptional return of $(docum ... value") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:18:66:25 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:28:66:31 | find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:28:66:31 | find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:28:66:31 | find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:28:66:31 | find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:33:66:40 | "option" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:43:66:46 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:43:66:46 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:43:66:46 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:43:66:46 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | CalleeFlexibleAccessPath | $().find().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:66:48:66:54 | "value" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:11 | myValue | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:11 | myValue | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:11 | myValue | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:11 | myValue | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:20 | myValue.property | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:20 | myValue.property | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:20 | myValue.property | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:5:67:20 | myValue.property | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:13:67:20 | property | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:13:67:20 | property | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:13:67:20 | property | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:67:13:67:20 | property | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:3 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:3 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:10 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:14 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:14 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:14 | $("#id").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:14 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | exceptional return of $("#id").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:17 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:27 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:27 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:27 | $("#id" ... nerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:27 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:37 | $("#id" ... myValue | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:37 | $("#id" ... myValue | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:37 | $("#id" ... myValue | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:3:68:37 | $("#id" ... myValue | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:5:68:9 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:12:68:14 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:12:68:14 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:12:68:14 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:12:68:14 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:16:68:16 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:19:68:27 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:19:68:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:19:68:27 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:19:68:27 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:31:68:37 | myValue | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:31:68:37 | myValue | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:31:68:37 | myValue | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:31:68:37 | myValue | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:68:31:68:37 | myValue | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:9 | $.jGrowl | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:9 | $.jGrowl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:9 | $.jGrowl | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:9 | $.jGrowl | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | $.jGrow ... ).name) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | $.jGrow ... ).name) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | $.jGrow ... ).name) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | $.jGrow ... ).name) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | exceptional return of $.jGrow ... ).name) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | exceptional return of $.jGrow ... ).name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | exceptional return of $.jGrow ... ).name) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:2:71:33 | exceptional return of $.jGrow ... ).name) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:4:71:9 | jGrowl | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:4:71:9 | jGrowl | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:4:71:9 | jGrowl | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:4:71:9 | jGrowl | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:11 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:11 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:11 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:11 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | $("input") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | exceptional return of $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | exceptional return of $("input") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | exceptional return of $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:20 | exceptional return of $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:24 | $("input").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:24 | $("input").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:24 | $("input").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:24 | $("input").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | $("input").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | exceptional return of $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | exceptional return of $("input").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | exceptional return of $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:27 | exceptional return of $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | CalleeFlexibleAccessPath | $.jGrowl |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:11:71:32 | $("inpu ... 0).name | receiverName | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:13:71:19 | "input" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:22:71:24 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:22:71:24 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:22:71:24 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:22:71:24 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:26:71:26 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:29:71:32 | name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:29:71:32 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:29:71:32 | name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:71:29:71:32 | name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:16 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:16 | selector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:16 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:16 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selecto ... 0).name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selecto ... 0).name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selecto ... 0).name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selecto ... 0).name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selector | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:9:73:41 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:20 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:20 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:20 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:20 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | $("input") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | exceptional return of $("input") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | exceptional return of $("input") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | exceptional return of $("input") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:29 | exceptional return of $("input") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:33 | $("input").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:33 | $("input").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:33 | $("input").get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:33 | $("input").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | $("input").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | exceptional return of $("input").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | exceptional return of $("input").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | exceptional return of $("input").get(0) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:36 | exceptional return of $("input").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:22:73:28 | "input" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:31:73:33 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:31:73:33 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:31:73:33 | get | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:31:73:33 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:35:73:35 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:38:73:41 | name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:38:73:41 | name | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:38:73:41 | name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:73:38:73:41 | name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:17 | something | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:17 | something | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:17 | something | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:17 | something | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | exceptional return of something() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | exceptional return of something() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | exceptional return of something() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | exceptional return of something() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | something() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | something() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | something() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:74:9:74:19 | something() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:16 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:16 | selector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:16 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:16 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selecto ... l \|\| '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selecto ... l \|\| '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selecto ... l \|\| '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selecto ... l \|\| '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selector | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:9:75:42 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:20 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:20 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:20 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:20 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | $("textarea") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | exceptional return of $("textarea") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | exceptional return of $("textarea") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | exceptional return of $("textarea") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:32 | exceptional return of $("textarea") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:36 | $("textarea").val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:36 | $("textarea").val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:36 | $("textarea").val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:36 | $("textarea").val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:42 | $("text ... l \|\| '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:42 | $("text ... l \|\| '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:42 | $("text ... l \|\| '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:20:75:42 | $("text ... l \|\| '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:22:75:31 | "textarea" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:34:75:36 | val | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:34:75:36 | val | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:34:75:36 | val | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:34:75:36 | val | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:41:75:42 | '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:41:75:42 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:41:75:42 | '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:75:41:75:42 | '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | selector | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:2 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | $(selector) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | $(selector) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | $(selector) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | $(selector) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | exceptional return of $(selector) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | exceptional return of $(selector) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | exceptional return of $(selector) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:2:77:12 | exceptional return of $(selector) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:77:4:77:11 | selector | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | $(docum ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | $(docum ... .value) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | $(docum ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | $(docum ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | exceptional return of $(docum ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | exceptional return of $(docum ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | exceptional return of $(docum ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:2:79:35 | exceptional return of $(docum ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:11 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:11 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:11 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:11 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:19 | document.my_form | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:19 | document.my_form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:19 | document.my_form | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:19 | document.my_form | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:28 | documen ... y_input | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:28 | documen ... y_input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:28 | documen ... y_input | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:28 | documen ... y_input | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:4:79:34 | documen ... t.value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:13:79:19 | my_form | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:13:79:19 | my_form | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:13:79:19 | my_form | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:13:79:19 | my_form | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:21:79:28 | my_input | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:21:79:28 | my_input | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:21:79:28 | my_input | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:21:79:28 | my_input | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:30:79:34 | value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:30:79:34 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:30:79:34 | value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:79:30:79:34 | value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | $("#id" ... ext') ) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | $("#id" ... ext') ) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | $("#id" ... ext') ) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | $("#id" ... ext') ) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | exceptional return of $("#id" ... ext') ) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | exceptional return of $("#id" ... ext') ) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | exceptional return of $("#id" ... ext') ) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:2:81:45 | exceptional return of $("#id" ... ext') ) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:4:81:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:11:81:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:11:81:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:11:81:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:11:81:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:17 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:17 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:17 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:17 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | $('#foo') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | $('#foo') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | $('#foo') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | $('#foo') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | exceptional return of $('#foo') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | exceptional return of $('#foo') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | exceptional return of $('#foo') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:25 | exceptional return of $('#foo') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:30 | $('#foo').prop | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:30 | $('#foo').prop | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:30 | $('#foo').prop | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:30 | $('#foo').prop | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | $('#foo ... rText') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | exceptional return of $('#foo ... rText') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | exceptional return of $('#foo ... rText') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | exceptional return of $('#foo ... rText') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:17:81:43 | exceptional return of $('#foo ... rText') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:19:81:24 | '#foo' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:27:81:30 | prop | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:27:81:30 | prop | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:27:81:30 | prop | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:27:81:30 | prop | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | CalleeFlexibleAccessPath | $().prop |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:81:32:81:42 | 'innerText' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:12 | anser | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:12 | anser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:12 | anser | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:12 | anser | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser = ... anser") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser = ... anser") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser = ... anser") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:8:83:31 | anser = ... anser") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:22 | require | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:22 | require | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:22 | require | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:22 | require | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | exceptional return of require("anser") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | exceptional return of require("anser") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | exceptional return of require("anser") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | exceptional return of require("anser") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | require("anser") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | require("anser") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | require("anser") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:16:83:31 | require("anser") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | calleeImports |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:83:24:83:30 | "anser" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:11 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:11 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:11 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:11 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text =  ... .text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text =  ... .text() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text =  ... .text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:8:84:30 | text =  ... .text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:15 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:15 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:15 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:15 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | $("text") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | $("text") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | $("text") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | $("text") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | exceptional return of $("text") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | exceptional return of $("text") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | exceptional return of $("text") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:23 | exceptional return of $("text") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:28 | $("text").text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:28 | $("text").text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:28 | $("text").text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:28 | $("text").text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | $("text").text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | $("text").text() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | $("text").text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | $("text").text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | exceptional return of $("text").text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | exceptional return of $("text").text() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | exceptional return of $("text").text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:15:84:30 | exceptional return of $("text").text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:17:84:22 | "text" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:25:84:28 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:25:84:28 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:25:84:28 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:84:25:84:28 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | $("#id" ... (text)) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | $("#id" ... (text)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | $("#id" ... (text)) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | $("#id" ... (text)) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | exceptional return of $("#id" ... (text)) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | exceptional return of $("#id" ... (text)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | exceptional return of $("#id" ... (text)) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:2:86:38 | exceptional return of $("#id" ... (text)) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:4:86:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:11:86:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:11:86:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:11:86:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:11:86:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:20 | anser | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:20 | anser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:20 | anser | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:20 | anser | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:31 | anser.ansiToHtml | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:31 | anser.ansiToHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:31 | anser.ansiToHtml | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:31 | anser.ansiToHtml | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | exceptional return of anser.a ... l(text) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | exceptional return of anser.a ... l(text) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | exceptional return of anser.a ... l(text) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:16:86:37 | exceptional return of anser.a ... l(text) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:22:86:31 | ansiToHtml | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:22:86:31 | ansiToHtml | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:22:86:31 | ansiToHtml | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:22:86:31 | ansiToHtml | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | CalleeFlexibleAccessPath | anser.ansiToHtml |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | calleeImports | anser |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:86:33:86:36 | text | receiverName | anser |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | $("#id" ... (text)) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | $("#id" ... (text)) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | $("#id" ... (text)) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | $("#id" ... (text)) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | exceptional return of $("#id" ... (text)) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | exceptional return of $("#id" ... (text)) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | exceptional return of $("#id" ... (text)) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:2:87:41 | exceptional return of $("#id" ... (text)) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:4:87:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:11:87:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:11:87:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:11:87:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:11:87:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | exceptional return of new anser() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | exceptional return of new anser() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | exceptional return of new anser() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | exceptional return of new anser() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | new anser() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | new anser() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | new anser() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:26 | new anser() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:34 | new anser().process | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:34 | new anser().process | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:34 | new anser().process | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:34 | new anser().process | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | exceptional return of new ans ... s(text) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | exceptional return of new ans ... s(text) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | exceptional return of new ans ... s(text) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | exceptional return of new ans ... s(text) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:16:87:40 | new ans ... s(text) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:20:87:24 | anser | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:20:87:24 | anser | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:20:87:24 | anser | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:20:87:24 | anser | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:28:87:34 | process | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:28:87:34 | process | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:28:87:34 | process | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:28:87:34 | process | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | CalleeFlexibleAccessPath | anser().process |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | calleeImports | anser |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:87:36:87:39 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | $("section h1") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | $("section h1") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | $("section h1") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | $("section h1") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | exceptional return of $("section h1") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | exceptional return of $("section h1") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | exceptional return of $("section h1") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:16 | exceptional return of $("section h1") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:21 | $("section h1").each | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:21 | $("section h1").each | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:21 | $("section h1").each | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:89:21 | $("section h1").each | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | $("sect ...  OK\\n\\t}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | $("sect ...  OK\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | $("sect ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | $("sect ...  OK\\n\\t}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | exceptional return of $("sect ...  OK\\n\\t}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | exceptional return of $("sect ...  OK\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | exceptional return of $("sect ...  OK\\n\\t}) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:2:91:3 | exceptional return of $("sect ...  OK\\n\\t}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:4:89:15 | "section h1" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:18:89:21 | each | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:18:89:21 | each | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:18:89:21 | each | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:18:89:21 | each | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:89:22 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:89:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:89:22 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:89:22 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | CalleeFlexibleAccessPath | $().each |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | functio ... / OK\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:89:23:91:2 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:3 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:3 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:3 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | $("nav ul") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | $("nav ul") | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | $("nav ul") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | $("nav ul") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | exceptional return of $("nav ul") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | exceptional return of $("nav ul") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | exceptional return of $("nav ul") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:13 | exceptional return of $("nav ul") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:20 | $("nav ul").append | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:20 | $("nav ul").append | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:20 | $("nav ul").append | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:20 | $("nav ul").append | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | $("nav  ... n</a>") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | $("nav  ... n</a>") | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | $("nav  ... n</a>") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | $("nav  ... n</a>") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | exceptional return of $("nav  ... n</a>") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | exceptional return of $("nav  ... n</a>") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | exceptional return of $("nav  ... n</a>") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:3:90:125 | exceptional return of $("nav  ... n</a>") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:5:90:12 | "nav ul" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:15:90:20 | append | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:15:90:20 | append | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:15:90:20 | append | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:15:90:20 | append | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:33 | "<a href='#" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:33 | "<a href='#" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:33 | "<a href='#" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:33 | "<a href='#" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:33 | "<a href='#" | stringConcatenatedWith |  -endpoint- $().text().toLowerCase().replace().replace() + ''>Section</a>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:106 | "<a hre ... +/g,'') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:106 | "<a hre ... +/g,'') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:106 | "<a hre ... +/g,'') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:106 | "<a hre ... +/g,'') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | CalleeFlexibleAccessPath | $().append |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:22:90:124 | "<a hre ... on</a>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:37 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:37 | $ | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:37 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:37 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | $(this) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | $(this) | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | $(this) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | $(this) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | exceptional return of $(this) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | exceptional return of $(this) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | exceptional return of $(this) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:43 | exceptional return of $(this) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:48 | $(this).text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:48 | $(this).text | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:48 | $(this).text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:48 | $(this).text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | $(this).text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | $(this).text() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | $(this).text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | $(this).text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | exceptional return of $(this).text() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | exceptional return of $(this).text() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | exceptional return of $(this).text() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:50 | exceptional return of $(this).text() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:62 | $(this) ... werCase | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:62 | $(this) ... werCase | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:62 | $(this) ... werCase | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:62 | $(this) ... werCase | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | $(this) ... rCase() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | $(this) ... rCase() | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | $(this) ... rCase() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | $(this) ... rCase() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | exceptional return of $(this) ... rCase() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | exceptional return of $(this) ... rCase() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | exceptional return of $(this) ... rCase() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:64 | exceptional return of $(this) ... rCase() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:72 | $(this) ... replace | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:72 | $(this) ... replace | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:72 | $(this) ... replace | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:72 | $(this) ... replace | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | $(this) ... g, '-') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | $(this) ... g, '-') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | $(this) ... g, '-') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | $(this) ... g, '-') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | exceptional return of $(this) ... g, '-') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | exceptional return of $(this) ... g, '-') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | exceptional return of $(this) ... g, '-') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:83 | exceptional return of $(this) ... g, '-') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:91 | $(this) ... replace | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:91 | $(this) ... replace | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:91 | $(this) ... replace | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:91 | $(this) ... replace | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | $(this) ... +/g,'') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | $(this) ... +/g,'') | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | $(this) ... +/g,'') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | $(this) ... +/g,'') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | $(this) ... +/g,'') | stringConcatenatedWith | '<a href='#' -endpoint- ''>Section</a>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | exceptional return of $(this) ... +/g,'') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | exceptional return of $(this) ... +/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | exceptional return of $(this) ... +/g,'') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:37:90:106 | exceptional return of $(this) ... +/g,'') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:39:90:42 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:45:90:48 | text | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:45:90:48 | text | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:45:90:48 | text | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:45:90:48 | text | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:52:90:62 | toLowerCase | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:52:90:62 | toLowerCase | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:52:90:62 | toLowerCase | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:52:90:62 | toLowerCase | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:66:90:72 | replace | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:66:90:72 | replace | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:66:90:72 | replace | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:66:90:72 | replace | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | CalleeFlexibleAccessPath | $().text().toLowerCase().replace |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:74:90:77 | / /g | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | CalleeFlexibleAccessPath | $().text().toLowerCase().replace |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:80:90:82 | '-' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:85:90:91 | replace | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:85:90:91 | replace | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:85:90:91 | replace | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:85:90:91 | replace | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | CalleeFlexibleAccessPath | $().text().toLowerCase().replace().replace |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:93:90:102 | /[^\\w-]+/g | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | CalleeFlexibleAccessPath | $().text().toLowerCase().replace().replace |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:104:90:105 | '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:110:90:124 | "'>Section</a>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:110:90:124 | "'>Section</a>" | contextSurroundingFunctionParameters | ()\n() |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:110:90:124 | "'>Section</a>" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:110:90:124 | "'>Section</a>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:90:110:90:124 | "'>Section</a>" | stringConcatenatedWith | '<a href='#' + $().text().toLowerCase().replace().replace() -endpoint-  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | $("#id" ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | $("#id" ... .value) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | $("#id" ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | $("#id" ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | exceptional return of $("#id" ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:2:93:47 | exceptional return of $("#id" ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:4:93:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:11:93:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:11:93:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:11:93:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:11:93:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:16 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:16 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:16 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:16 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | $("#foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | $("#foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | $("#foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | exceptional return of $("#foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:24 | exceptional return of $("#foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:29 | $("#foo").find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:29 | $("#foo").find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:29 | $("#foo").find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:29 | $("#foo").find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | $("#foo ... ".bla") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | $("#foo ... ".bla") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | $("#foo ... ".bla") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | $("#foo ... ".bla") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | exceptional return of $("#foo ... ".bla") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | exceptional return of $("#foo ... ".bla") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | exceptional return of $("#foo ... ".bla") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:37 | exceptional return of $("#foo ... ".bla") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:40 | $("#foo ... la")[0] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:40 | $("#foo ... la")[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:40 | $("#foo ... la")[0] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:40 | $("#foo ... la")[0] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:16:93:46 | $("#foo ... ].value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:18:93:23 | "#foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:26:93:29 | find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:26:93:29 | find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:26:93:29 | find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:26:93:29 | find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:31:93:36 | ".bla" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:39:93:39 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:39:93:39 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:39:93:39 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:39:93:39 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:42:93:46 | value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:42:93:46 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:42:93:46 | value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:93:42:93:46 | value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:11 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:11 | i | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:11 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:11 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i = 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i = 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i = 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:11:95:15 | i = 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:15:95:15 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:15:95:15 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:15:95:15 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:15:95:15 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:18 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:31 | i < foo.length | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:31 | i < foo.length | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:31 | i < foo.length | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:18:95:31 | i < foo.length | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:24 | foo | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:24 | foo | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:24 | foo | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:24 | foo | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:31 | foo.length | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:31 | foo.length | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:31 | foo.length | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:22:95:31 | foo.length | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:26:95:31 | length | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:26:95:31 | length | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:26:95:31 | length | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:26:95:31 | length | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:34 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:34 | i | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:34 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:34 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i++ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i++ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i++ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:95:34:95:36 | i++ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:3 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:3 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:3 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:10 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:15 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:15 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:15 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:15 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | $("#id" ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | $("#id" ... .value) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | $("#id" ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | $("#id" ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | exceptional return of $("#id" ... .value) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | exceptional return of $("#id" ... .value) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | exceptional return of $("#id" ... .value) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:3:96:48 | exceptional return of $("#id" ... .value) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:5:96:9 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:12:96:15 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:12:96:15 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:12:96:15 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:12:96:15 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:17 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:17 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:17 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:17 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | $("#foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | $("#foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | $("#foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | $("#foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | exceptional return of $("#foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | exceptional return of $("#foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | exceptional return of $("#foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:25 | exceptional return of $("#foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:30 | $("#foo").find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:30 | $("#foo").find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:30 | $("#foo").find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:30 | $("#foo").find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | $("#foo ... ".bla") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | $("#foo ... ".bla") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | $("#foo ... ".bla") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | $("#foo ... ".bla") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | exceptional return of $("#foo ... ".bla") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | exceptional return of $("#foo ... ".bla") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | exceptional return of $("#foo ... ".bla") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:38 | exceptional return of $("#foo ... ".bla") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:41 | $("#foo ... la")[i] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:41 | $("#foo ... la")[i] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:41 | $("#foo ... la")[i] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:41 | $("#foo ... la")[i] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:17:96:47 | $("#foo ... ].value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:19:96:24 | "#foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:27:96:30 | find | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:27:96:30 | find | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:27:96:30 | find | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:27:96:30 | find | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | CalleeFlexibleAccessPath | $().find |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:32:96:37 | ".bla" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:40:96:40 | i | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:40:96:40 | i | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:40:96:40 | i | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:40:96:40 | i | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:43:96:47 | value | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:43:96:47 | value | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:43:96:47 | value | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:96:43:96:47 | value | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | class S ... );\\n\\t}\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | class S ... );\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:1:104:1 | class S ... );\\n\\t}\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:7:100:11 | Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:7:100:11 | Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:100:7:100:11 | Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:101:12 | constructor | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:101:12 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:101:12 | constructor | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:2:103:2 | constru ... (0);\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:101:12 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:101:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:101:12 | this | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:101:12 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:101:12 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | 'arguments' object of constructor of class Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | 'arguments' object of constructor of class Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | 'arguments' object of constructor of class Super | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | 'arguments' object of constructor of class Super | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | 'arguments' object of constructor of class Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | () {\\n\\t\\t ... (0);\\n\\t} | assignedToPropName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | () {\\n\\t\\t ... (0);\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | () {\\n\\t\\t ... (0);\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | () {\\n\\t\\t ... (0);\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | exceptional return of constructor of class Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | exceptional return of constructor of class Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | exceptional return of constructor of class Super | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | exceptional return of constructor of class Super | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | exceptional return of constructor of class Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | return of constructor of class Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | return of constructor of class Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | return of constructor of class Super | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | return of constructor of class Super | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:101:13:103:2 | return of constructor of class Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:6 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:6 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:6 | this | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:6 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:6 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:9 | this.el | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:9 | this.el | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:9 | this.el | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:9 | this.el | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:9 | this.el | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:27 | this.el ... .get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:27 | this.el ... .get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:27 | this.el ... .get(0) | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:27 | this.el ... .get(0) | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:3:102:27 | this.el ... .get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:8:102:9 | el | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:8:102:9 | el | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:8:102:9 | el | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:8:102:9 | el | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:8:102:9 | el | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:13 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:13 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:13 | $ | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:13 | $ | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:13 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | $("#id") | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | $("#id") | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | exceptional return of $("#id") | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | exceptional return of $("#id") | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:20 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:24 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:24 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:24 | $("#id").get | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:24 | $("#id").get | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:24 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | assignedToPropName | el |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | exceptional return of $("#id").get(0) | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | exceptional return of $("#id").get(0) | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:13:102:27 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:15:102:19 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:22:102:24 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:22:102:24 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:22:102:24 | get | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:22:102:24 | get | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:22:102:24 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | enclosingFunctionBody | el $ #id get 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:102:26:102:26 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:1:111:1 | class S ... >`\\n\\t}\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:1:111:1 | class S ... >`\\n\\t}\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:1:111:1 | class S ... >`\\n\\t}\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:7:106:9 | Sub | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:7:106:9 | Sub | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:7:106:9 | Sub | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:19:106:23 | Super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:19:106:23 | Super | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:106:19:106:23 | Super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:107:12 | constructor | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:107:12 | constructor | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:107:12 | constructor | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:2:110:2 | constru ...  />`\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:107:12 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:107:12 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:107:12 | this | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:107:12 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:107:12 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | 'arguments' object of constructor of class Sub | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | 'arguments' object of constructor of class Sub | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | 'arguments' object of constructor of class Sub | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | 'arguments' object of constructor of class Sub | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | 'arguments' object of constructor of class Sub | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | () {\\n\\t\\t ...  />`\\n\\t} | assignedToPropName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | () {\\n\\t\\t ...  />`\\n\\t} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | () {\\n\\t\\t ...  />`\\n\\t} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | () {\\n\\t\\t ...  />`\\n\\t} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | exceptional return of constructor of class Sub | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | exceptional return of constructor of class Sub | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | exceptional return of constructor of class Sub | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | exceptional return of constructor of class Sub | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | exceptional return of constructor of class Sub | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | return of constructor of class Sub | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | return of constructor of class Sub | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | return of constructor of class Sub | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | return of constructor of class Sub | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:107:13:110:2 | return of constructor of class Sub | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:7 | super | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:7 | super | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:7 | super | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:7 | super | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:7 | super | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | exceptional return of super() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | exceptional return of super() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | exceptional return of super() | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | exceptional return of super() | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | exceptional return of super() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | super() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | super() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | super() | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | super() | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:108:3:108:9 | super() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:3 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:3 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:3 | $ | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:3 | $ | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:3 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | $("#id") | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | $("#id") | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | exceptional return of $("#id") | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | exceptional return of $("#id") | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:10 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:14 | $("#id").get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:14 | $("#id").get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:14 | $("#id").get | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:14 | $("#id").get | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:14 | $("#id").get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | $("#id").get(0) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | $("#id").get(0) | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | $("#id").get(0) | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | exceptional return of $("#id").get(0) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | exceptional return of $("#id").get(0) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | exceptional return of $("#id").get(0) | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | exceptional return of $("#id").get(0) | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:17 | exceptional return of $("#id").get(0) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:27 | $("#id" ... nerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:27 | $("#id" ... nerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:27 | $("#id" ... nerHTML | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:27 | $("#id" ... nerHTML | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:27 | $("#id" ... nerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:70 | $("#id" ... oo</a>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:70 | $("#id" ... oo</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:70 | $("#id" ... oo</a>" | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:70 | $("#id" ... oo</a>" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:3:109:70 | $("#id" ... oo</a>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:5:109:9 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:12:109:14 | get | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:12:109:14 | get | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:12:109:14 | get | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:12:109:14 | get | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:12:109:14 | get | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | CalleeFlexibleAccessPath | $().get |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:16:109:16 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:19:109:27 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:19:109:27 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:19:109:27 | innerHTML | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:19:109:27 | innerHTML | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:19:109:27 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:41 | "<a src=\\"" | stringConcatenatedWith |  -endpoint- this.el.src + '">foo</a>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:55 | "<a src ... .el.src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:55 | "<a src ... .el.src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:55 | "<a src ... .el.src | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:55 | "<a src ... .el.src | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:55 | "<a src ... .el.src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:48 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:48 | this | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:48 | this | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:48 | this | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:48 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:51 | this.el | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:51 | this.el | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:51 | this.el | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:51 | this.el | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:51 | this.el | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:45:109:55 | this.el.src | stringConcatenatedWith | '<a src="' -endpoint- '">foo</a>' |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:50:109:51 | el | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:50:109:51 | el | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:50:109:51 | el | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:50:109:51 | el | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:50:109:51 | el | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:53:109:55 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:53:109:55 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:53:109:55 | src | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:53:109:55 | src | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:53:109:55 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | enclosingFunctionBody | $ #id get 0 innerHTML <a src=" el src ">foo</a> |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | enclosingFunctionName | constructor |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:109:59:109:70 | "\\">foo</a>" | stringConcatenatedWith | '<a src="' + this.el.src -endpoint-  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:2 | (functi ...    }\\n}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:2 | (functi ...    }\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:2 | (functi ...    }\\n}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | (functi ...  }\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | (functi ...  }\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | exceptional return of (functi ...  }\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | exceptional return of (functi ...  }\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:1:124:4 | exceptional return of (functi ...  }\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:113:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:113:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:113:1 | this | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:113:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:113:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | 'arguments' object of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | exceptional return of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | functio ...     }\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | functio ...     }\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | functio ...     }\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | return of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:113:2:124:1 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:13 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:13 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:13 | src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:13 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:13 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src = d ... k").src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src = d ... k").src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src = d ... k").src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src = d ... k").src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:11:114:52 | src = d ... k").src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:24 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:24 | document | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:24 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:24 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:39 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:39 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:39 | documen ... entById | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:39 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:39 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | documen ... #link") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | documen ... #link") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | documen ... #link") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | documen ... #link") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | documen ... #link") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | exceptional return of documen ... #link") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | exceptional return of documen ... #link") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | exceptional return of documen ... #link") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | exceptional return of documen ... #link") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:48 | exceptional return of documen ... #link") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:52 | documen ... k").src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:52 | documen ... k").src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:52 | documen ... k").src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:52 | documen ... k").src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:17:114:52 | documen ... k").src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:26:114:39 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:26:114:39 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:26:114:39 | getElementById | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:26:114:39 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:26:114:39 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:41:114:47 | "#link" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:50:114:52 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:50:114:52 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:50:114:52 | src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:50:114:52 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:114:50:114:52 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:2 | $ | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | exceptional return of $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:14 | $("#id").html | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | $("#id").html(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | $("#id").html(src) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | $("#id").html(src) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | $("#id").html(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | $("#id").html(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | exceptional return of $("#id").html(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | exceptional return of $("#id").html(src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | exceptional return of $("#id").html(src) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | exceptional return of $("#id").html(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:2:115:19 | exceptional return of $("#id").html(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:4:115:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:11:115:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:11:115:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:11:115:14 | html | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:11:115:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:11:115:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:115:16:115:18 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:5 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:5 | $ | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:5 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | exceptional return of $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:12 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:17 | $("#id").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:17 | $("#id").attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:17 | $("#id").attr | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:17 | $("#id").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:17 | $("#id").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | $("#id" ... ", src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | $("#id" ... ", src) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | $("#id" ... ", src) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | $("#id" ... ", src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | $("#id" ... ", src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | exceptional return of $("#id" ... ", src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | exceptional return of $("#id" ... ", src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | exceptional return of $("#id" ... ", src) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | exceptional return of $("#id" ... ", src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:5:117:29 | exceptional return of $("#id" ... ", src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:7:117:11 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:14:117:17 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:14:117:17 | attr | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:14:117:17 | attr | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:14:117:17 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:14:117:17 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:19:117:23 | "src" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:117:26:117:28 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:5 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:5 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:5 | $ | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:5 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:5 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | $("input.foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | $("input.foo") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | $("input.foo") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | $("input.foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | $("input.foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | exceptional return of $("input.foo") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | exceptional return of $("input.foo") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | exceptional return of $("input.foo") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | exceptional return of $("input.foo") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:18 | exceptional return of $("input.foo") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:21 | $("input.foo")[0] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:21 | $("input.foo")[0] | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:21 | $("input.foo")[0] | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:21 | $("input.foo")[0] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:21 | $("input.foo")[0] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:30 | $("inpu ... nchange | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:30 | $("inpu ... nchange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:30 | $("inpu ... nchange | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:30 | $("inpu ... nchange | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:119:30 | $("inpu ... nchange | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:123:5 | $("inpu ... K\\n    } | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:123:5 | $("inpu ... K\\n    } | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:123:5 | $("inpu ... K\\n    } | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:123:5 | $("inpu ... K\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:5:123:5 | $("inpu ... K\\n    } | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:7:119:17 | "input.foo" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:20:119:20 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:20:119:20 | 0 | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:20:119:20 | 0 | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:20:119:20 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:20:119:20 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:23:119:30 | onchange | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:23:119:30 | onchange | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:23:119:30 | onchange | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:23:119:30 | onchange | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:23:119:30 | onchange | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:119:33 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:119:33 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:119:33 | this | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:119:33 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:119:33 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | 'arguments' object of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | exceptional return of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | assignedToPropName | onchange |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | functio ... K\\n    } | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | return of anonymous function | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:34:123:5 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:119:44:119:45 | ev | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:9 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:9 | $ | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:9 | $ | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:9 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:9 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | $("#id") | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | exceptional return of $("#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:16 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:21 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:21 | $("#id").html | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:21 | $("#id").html | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:21 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:21 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | $("#id" ... ].name) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | $("#id" ... ].name) | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | $("#id" ... ].name) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | $("#id" ... ].name) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | $("#id" ... ].name) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | exceptional return of $("#id" ... ].name) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | exceptional return of $("#id" ... ].name) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | exceptional return of $("#id" ... ].name) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | exceptional return of $("#id" ... ].name) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:9:120:46 | exceptional return of $("#id" ... ].name) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:11:120:15 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:18:120:21 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:18:120:21 | html | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:18:120:21 | html | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:18:120:21 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:18:120:21 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:24 | ev | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:24 | ev | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:24 | ev | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:24 | ev | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:24 | ev | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:31 | ev.target | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:31 | ev.target | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:31 | ev.target | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:31 | ev.target | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:31 | ev.target | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:37 | ev.target.files | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:37 | ev.target.files | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:37 | ev.target.files | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:37 | ev.target.files | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:37 | ev.target.files | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:40 | ev.target.files[0] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:40 | ev.target.files[0] | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:40 | ev.target.files[0] | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:40 | ev.target.files[0] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:40 | ev.target.files[0] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:26:120:31 | target | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:26:120:31 | target | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:26:120:31 | target | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:26:120:31 | target | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:26:120:31 | target | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:33:120:37 | files | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:33:120:37 | files | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:33:120:37 | files | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:33:120:37 | files | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:33:120:37 | files | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:39:120:39 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:39:120:39 | 0 | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:39:120:39 | 0 | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:39:120:39 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:39:120:39 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:42:120:45 | name | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:42:120:45 | name | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:42:120:45 | name | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:42:120:45 | name | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:120:42:120:45 | name | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:9 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:9 | $ | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:9 | $ | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:9 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:9 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | $("img#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | $("img#id") | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | $("img#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | $("img#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | $("img#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | exceptional return of $("img#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | exceptional return of $("img#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | exceptional return of $("img#id") | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | exceptional return of $("img#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:19 | exceptional return of $("img#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:24 | $("img#id").attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:24 | $("img#id").attr | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:24 | $("img#id").attr | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:24 | $("img#id").attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:24 | $("img#id").attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | $("img# ... es[0])) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | $("img# ... es[0])) | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | $("img# ... es[0])) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | $("img# ... es[0])) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | $("img# ... es[0])) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | exceptional return of $("img# ... es[0])) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | exceptional return of $("img# ... es[0])) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | exceptional return of $("img# ... es[0])) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | exceptional return of $("img# ... es[0])) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:9:122:72 | exceptional return of $("img# ... es[0])) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:11:122:18 | "img#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:21:122:24 | attr | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:21:122:24 | attr | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:21:122:24 | attr | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:21:122:24 | attr | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:21:122:24 | attr | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:26:122:30 | "src" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:35 | URL | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:35 | URL | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:35 | URL | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:35 | URL | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:35 | URL | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:51 | URL.createObjectURL | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:51 | URL.createObjectURL | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:51 | URL.createObjectURL | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:51 | URL.createObjectURL | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:51 | URL.createObjectURL | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | CalleeFlexibleAccessPath | $().attr |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | InputArgumentIndex | 1 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | exceptional return of URL.cre ... les[0]) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | exceptional return of URL.cre ... les[0]) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | exceptional return of URL.cre ... les[0]) | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | exceptional return of URL.cre ... les[0]) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:33:122:71 | exceptional return of URL.cre ... les[0]) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:37:122:51 | createObjectURL | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:37:122:51 | createObjectURL | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:37:122:51 | createObjectURL | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:37:122:51 | createObjectURL | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:37:122:51 | createObjectURL | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:54 | ev | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:54 | ev | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:54 | ev | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:54 | ev | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:54 | ev | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:61 | ev.target | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:61 | ev.target | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:61 | ev.target | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:61 | ev.target | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:61 | ev.target | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:67 | ev.target.files | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:67 | ev.target.files | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:67 | ev.target.files | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:67 | ev.target.files | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:67 | ev.target.files | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | CalleeFlexibleAccessPath | URL.createObjectURL |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:53:122:70 | ev.target.files[0] | receiverName | URL |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:56:122:61 | target | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:56:122:61 | target | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:56:122:61 | target | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:56:122:61 | target | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:56:122:61 | target | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:63:122:67 | files | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:63:122:67 | files | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:63:122:67 | files | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:63:122:67 | files | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:63:122:67 | files | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:69:122:69 | 0 | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:69:122:69 | 0 | contextSurroundingFunctionParameters | ()\n(ev) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:69:122:69 | 0 | enclosingFunctionBody | src document getElementById #link src $ #id html src $ #id attr src src $ 0 input.foo 0 onchange ev $ #id html ev 0 target files 0 name $ img#id attr src URL createObjectURL ev 0 target files 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:69:122:69 | 0 | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:122:69:122:69 | 0 | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:2 | (functi ... / OK\\n}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:2 | (functi ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:2 | (functi ... / OK\\n}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | (functi ... OK\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | (functi ... OK\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | (functi ... OK\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | exceptional return of (functi ... OK\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | exceptional return of (functi ... OK\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:1:134:4 | exceptional return of (functi ... OK\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:126:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:126:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:126:1 | this | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:126:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:126:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | functio ... // OK\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | functio ... // OK\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | return of anonymous function | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:126:2:134:1 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:9 | elem | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:9 | elem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:9 | elem | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:9 | elem | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:9 | elem | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem =  ... nt('a') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem =  ... nt('a') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem =  ... nt('a') | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem =  ... nt('a') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:6:127:39 | elem =  ... nt('a') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:20 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:20 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:20 | document | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:20 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:20 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:34 | documen ... Element | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:34 | documen ... Element | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:34 | documen ... Element | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:34 | documen ... Element | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:34 | documen ... Element | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | documen ... nt('a') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | documen ... nt('a') | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | documen ... nt('a') | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | documen ... nt('a') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | documen ... nt('a') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | exceptional return of documen ... nt('a') | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | exceptional return of documen ... nt('a') | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | exceptional return of documen ... nt('a') | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | exceptional return of documen ... nt('a') | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:13:127:39 | exceptional return of documen ... nt('a') | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:22:127:34 | createElement | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:22:127:34 | createElement | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:22:127:34 | createElement | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:22:127:34 | createElement | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:22:127:34 | createElement | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | CalleeFlexibleAccessPath | document.createElement |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:127:36:127:38 | 'a' | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:17 | wSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:17 | wSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:17 | wSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:17 | wSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:17 | wSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelect ... ction() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelect ... ction() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelect ... ction() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelect ... ction() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelect ... ction() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelection | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:8:128:34 | wSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:32 | getSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:32 | getSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:32 | getSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:32 | getSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:32 | getSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | exceptional return of getSelection() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | exceptional return of getSelection() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | exceptional return of getSelection() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | exceptional return of getSelection() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | exceptional return of getSelection() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | getSelection() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | getSelection() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | getSelection() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | getSelection() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:128:21:128:34 | getSelection() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:17 | dSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:17 | dSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:17 | dSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:17 | dSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:17 | dSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelect ... ction() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelect ... ction() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelect ... ction() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelect ... ction() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelect ... ction() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelection | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:8:129:43 | dSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:28 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:28 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:28 | document | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:28 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:28 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:41 | documen ... lection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:41 | documen ... lection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:41 | documen ... lection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:41 | documen ... lection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:41 | documen ... lection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | documen ... ction() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | documen ... ction() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | documen ... ction() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | documen ... ction() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | documen ... ction() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | exceptional return of documen ... ction() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | exceptional return of documen ... ction() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | exceptional return of documen ... ction() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | exceptional return of documen ... ction() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:21:129:43 | exceptional return of documen ... ction() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:30:129:41 | getSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:30:129:41 | getSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:30:129:41 | getSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:30:129:41 | getSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:129:30:129:41 | getSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:13 | linkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:13 | linkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:13 | linkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:13 | linkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:13 | linkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkTex ... ) \|\| '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkTex ... ) \|\| '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkTex ... ) \|\| '' | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkTex ... ) \|\| '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkTex ... ) \|\| '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkText | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:6:130:68 | linkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:26 | wSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:26 | wSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:26 | wSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:26 | wSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:26 | wSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:35 | wSelection.toString | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:35 | wSelection.toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:35 | wSelection.toString | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:35 | wSelection.toString | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:35 | wSelection.toString | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | exceptional return of wSelect ... tring() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | exceptional return of wSelect ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | exceptional return of wSelect ... tring() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | exceptional return of wSelect ... tring() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | exceptional return of wSelect ... tring() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | wSelect ... tring() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | wSelect ... tring() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | wSelect ... tring() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | wSelect ... tring() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:37 | wSelect ... tring() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:62 | wSelect ... tring() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:62 | wSelect ... tring() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:62 | wSelect ... tring() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:62 | wSelect ... tring() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:62 | wSelect ... tring() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:68 | wSelect ... ) \|\| '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:68 | wSelect ... ) \|\| '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:68 | wSelect ... ) \|\| '' | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:68 | wSelect ... ) \|\| '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:17:130:68 | wSelect ... ) \|\| '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:28:130:35 | toString | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:28:130:35 | toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:28:130:35 | toString | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:28:130:35 | toString | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:28:130:35 | toString | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:51 | dSelection | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:51 | dSelection | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:51 | dSelection | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:51 | dSelection | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:51 | dSelection | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:60 | dSelection.toString | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:60 | dSelection.toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:60 | dSelection.toString | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:60 | dSelection.toString | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:60 | dSelection.toString | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | dSelect ... tring() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | dSelect ... tring() | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | dSelect ... tring() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | dSelect ... tring() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | dSelect ... tring() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | exceptional return of dSelect ... tring() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | exceptional return of dSelect ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | exceptional return of dSelect ... tring() | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | exceptional return of dSelect ... tring() | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:42:130:62 | exceptional return of dSelect ... tring() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:53:130:60 | toString | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:53:130:60 | toString | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:53:130:60 | toString | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:53:130:60 | toString | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:53:130:60 | toString | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:67:130:68 | '' | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:67:130:68 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:67:130:68 | '' | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:67:130:68 | '' | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:130:67:130:68 | '' | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:5 | elem | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:5 | elem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:5 | elem | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:5 | elem | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:5 | elem | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:15 | elem.innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:15 | elem.innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:15 | elem.innerHTML | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:15 | elem.innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:15 | elem.innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:26 | elem.in ... inkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:26 | elem.in ... inkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:26 | elem.in ... inkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:26 | elem.in ... inkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:2:131:26 | elem.in ... inkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:7:131:15 | innerHTML | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:7:131:15 | innerHTML | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:7:131:15 | innerHTML | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:7:131:15 | innerHTML | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:7:131:15 | innerHTML | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | assignedToPropName | innerHTML |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:131:19:131:26 | linkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:2 | $ | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:2 | $ | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:2 | $ | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:2 | $ | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:2 | $ | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | $("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | $("#id") | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | exceptional return of $("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | exceptional return of $("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | exceptional return of $("#id") | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | exceptional return of $("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:9 | exceptional return of $("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:14 | $("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:14 | $("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:14 | $("#id").html | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:14 | $("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:14 | $("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | $("#id" ... nkText) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | $("#id" ... nkText) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | $("#id" ... nkText) | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | $("#id" ... nkText) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | $("#id" ... nkText) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | exceptional return of $("#id" ... nkText) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | exceptional return of $("#id" ... nkText) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | exceptional return of $("#id" ... nkText) | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | exceptional return of $("#id" ... nkText) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:2:132:24 | exceptional return of $("#id" ... nkText) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | CalleeFlexibleAccessPath | $ |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:4:132:8 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:11:132:14 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:11:132:14 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:11:132:14 | html | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:11:132:14 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:11:132:14 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | CalleeFlexibleAccessPath | $().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:132:16:132:23 | linkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:5 | elem | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:5 | elem | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:5 | elem | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:5 | elem | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:5 | elem | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:15 | elem.innerText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:15 | elem.innerText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:15 | elem.innerText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:15 | elem.innerText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:15 | elem.innerText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:26 | elem.in ... inkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:26 | elem.in ... inkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:26 | elem.in ... inkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:26 | elem.in ... inkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:2:133:26 | elem.in ... inkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:7:133:15 | innerText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:7:133:15 | innerText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:7:133:15 | innerText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:7:133:15 | innerText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:7:133:15 | innerText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | assignedToPropName | innerText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | enclosingFunctionBody | elem document createElement a wSelection getSelection dSelection document getSelection linkText wSelection toString dSelection toString  elem innerHTML linkText $ #id html linkText elem innerText linkText |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:133:19:133:26 | linkText | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:13 | cashDom | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:13 | cashDom | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:13 | cashDom | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:13 | cashDom | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom ... h-dom") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom ... h-dom") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:7:136:35 | cashDom ... h-dom") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:23 | require | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:23 | require | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:23 | require | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | exceptional return of require("cash-dom") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | exceptional return of require("cash-dom") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | exceptional return of require("cash-dom") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | require("cash-dom") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | require("cash-dom") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:17:136:35 | require("cash-dom") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | CalleeFlexibleAccessPath | require |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | calleeImports |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:136:25:136:34 | "cash-dom" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:2 | (functi ... T OK\\n}) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | (functi ... OK\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | (functi ... OK\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | (functi ... OK\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | exceptional return of (functi ... OK\\n})() | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | exceptional return of (functi ... OK\\n})() | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:1:142:4 | exceptional return of (functi ... OK\\n})() | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | cashDom | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | cashDom | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | cashDom | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | cashDom | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | cashDom | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | this | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | this | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | this | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:138:1 | this | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | 'arguments' object of anonymous function | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | 'arguments' object of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | exceptional return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | exceptional return of anonymous function | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | exceptional return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | functio ... OT OK\\n} | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | functio ... OT OK\\n} | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | return of anonymous function | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | return of anonymous function | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:138:2:142:1 | return of anonymous function | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:13 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:13 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:13 | src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:13 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:13 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src = d ... k").src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src = d ... k").src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src = d ... k").src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src = d ... k").src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:11:139:52 | src = d ... k").src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:24 | document | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:24 | document | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:24 | document | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:24 | document | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:24 | document | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:39 | documen ... entById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:39 | documen ... entById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:39 | documen ... entById | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:39 | documen ... entById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:39 | documen ... entById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | documen ... #link") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | documen ... #link") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | documen ... #link") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | documen ... #link") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | documen ... #link") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | exceptional return of documen ... #link") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | exceptional return of documen ... #link") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | exceptional return of documen ... #link") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | exceptional return of documen ... #link") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:48 | exceptional return of documen ... #link") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:52 | documen ... k").src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:52 | documen ... k").src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:52 | documen ... k").src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:52 | documen ... k").src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:17:139:52 | documen ... k").src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:26:139:39 | getElementById | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:26:139:39 | getElementById | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:26:139:39 | getElementById | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:26:139:39 | getElementById | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:26:139:39 | getElementById | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | CalleeFlexibleAccessPath | document.getElementById |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:41:139:47 | "#link" | receiverName | document |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:50:139:52 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:50:139:52 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:50:139:52 | src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:50:139:52 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:139:50:139:52 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:5 | cash | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:5 | cash | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:5 | cash | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:5 | cash | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:5 | cash | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | cash("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | cash("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | cash("#id") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | cash("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | cash("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | exceptional return of cash("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | exceptional return of cash("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | exceptional return of cash("#id") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | exceptional return of cash("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:12 | exceptional return of cash("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:17 | cash("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:17 | cash("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:17 | cash("#id").html | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:17 | cash("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:17 | cash("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | cash("# ... ml(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | cash("# ... ml(src) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | cash("# ... ml(src) | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | cash("# ... ml(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | cash("# ... ml(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | exceptional return of cash("# ... ml(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | exceptional return of cash("# ... ml(src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | exceptional return of cash("# ... ml(src) | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | exceptional return of cash("# ... ml(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:2:140:22 | exceptional return of cash("# ... ml(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | CalleeFlexibleAccessPath | cash |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:7:140:11 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:14:140:17 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:14:140:17 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:14:140:17 | html | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:14:140:17 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:14:140:17 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | CalleeFlexibleAccessPath | cash().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:140:19:140:21 | src | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:11 | cashDom | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:11 | cashDom | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:11 | cashDom | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:11 | cashDom | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:11 | cashDom | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | cashDom("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | cashDom("#id") | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | cashDom("#id") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | cashDom("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | cashDom("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | exceptional return of cashDom("#id") | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | exceptional return of cashDom("#id") | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | exceptional return of cashDom("#id") | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | exceptional return of cashDom("#id") | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:18 | exceptional return of cashDom("#id") | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:23 | cashDom("#id").html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:23 | cashDom("#id").html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:23 | cashDom("#id").html | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:23 | cashDom("#id").html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:23 | cashDom("#id").html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | cashDom ... ml(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | cashDom ... ml(src) | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | cashDom ... ml(src) | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | cashDom ... ml(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | cashDom ... ml(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | exceptional return of cashDom ... ml(src) | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | exceptional return of cashDom ... ml(src) | contextSurroundingFunctionParameters |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | exceptional return of cashDom ... ml(src) | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | exceptional return of cashDom ... ml(src) | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:5:141:28 | exceptional return of cashDom ... ml(src) | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | CalleeFlexibleAccessPath | cashDom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | calleeImports | cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:13:141:17 | "#id" | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:20:141:23 | html | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:20:141:23 | html | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:20:141:23 | html | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:20:141:23 | html | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:20:141:23 | html | fileImports | anser cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | CalleeFlexibleAccessPath | cashDom().html |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | InputArgumentIndex | 0 |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | calleeImports | cash-dom |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | contextFunctionInterfaces | constructor()\nconstructor()\nonchange(ev)\nsafe1(x)\nsafe2(x) |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | contextSurroundingFunctionParameters | () |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | enclosingFunctionBody | src document getElementById #link src cash #id html src cashDom #id html src |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | enclosingFunctionName |  |
| autogenerated/Xss/XssThroughDom/xss-through-dom.js:141:25:141:27 | src | fileImports | anser cash-dom |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:1:1:0 | this | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:1:11 | filters | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:1:11 | filters | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:1:11 | filters | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:23:1 | filters ... roups\\n] | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:23:1 | filters ... roups\\n] | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:5:23:1 | filters ... roups\\n] | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:15:23:1 | [\\n    / ... roups\\n] | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:15:23:1 | [\\n    / ... roups\\n] | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:1:15:23:1 | [\\n    / ... roups\\n] | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:2:5:2:31 | /<scrip ... ript>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:3:5:3:32 | /<scrip ... ipt>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:4:5:4:37 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:5:5:5:17 | /<!--.*-->/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:6:5:6:19 | /<!--.*--!?>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:7:5:7:18 | /<!--.*--!?>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:8:5:8:41 | /<scrip ... ^>]*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:9:5:9:39 | /<scrip ... ^>]*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:10:5:10:47 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:11:5:11:47 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:12:5:12:51 | /<scrip ... >]*>/is | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:13:5:13:36 | /<scrip ... ^>]*>/s | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:14:5:14:54 | /<(scri ... ^>]*>/s | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:15:5:15:41 | /<scrip ... pt.*>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:16:5:16:45 | /<scrip ... >]*?>/i | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:17:5:17:43 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:18:5:18:49 | /<(?:!- ... \\s]*?>/ | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:19:5:19:148 | /<(?:(? ... /?)>))/ | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:20:2:20:60 | /(<[a-z ... )+>)/gi | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:21:5:21:251 | /<(?:(? ... +)>))/g | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:22:5:22:35 | /<!--([ ... ]*?)>/g | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:9 | doFilters | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:9 | doFilters | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:9 | doFilters | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | doFilters(filters) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | doFilters(filters) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | doFilters(filters) | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | exceptional return of doFilters(filters) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | exceptional return of doFilters(filters) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:1:25:18 | exceptional return of doFilters(filters) | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:11:25:17 | filters | CalleeFlexibleAccessPath | doFilters |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:11:25:17 | filters | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:11:25:17 | filters | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:11:25:17 | filters | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:25:11:25:17 | filters | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:9 | strip | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:9 | strip | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:9 | strip | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:58 | strip = ... ^>]*)>' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:58 | strip = ... ^>]*)>' | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:5:27:58 | strip = ... ^>]*)>' | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:13:27:58 | '<scrip ... ^>]*)>' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:13:27:58 | '<scrip ... ^>]*)>' | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:27:13:27:58 | '<scrip ... ^>]*)>' | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | exceptional return of new Reg ... , 'gi') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | exceptional return of new Reg ... , 'gi') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | exceptional return of new Reg ... , 'gi') | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | new Reg ... , 'gi') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | new Reg ... , 'gi') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:1:28:23 | new Reg ... , 'gi') | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:5:28:10 | RegExp | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:5:28:10 | RegExp | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:5:28:10 | RegExp | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:12:28:16 | strip | CalleeFlexibleAccessPath | RegExp |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:12:28:16 | strip | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:12:28:16 | strip | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:12:28:16 | strip | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:12:28:16 | strip | fileImports |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:19:28:22 | 'gi' | CalleeFlexibleAccessPath | RegExp |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:19:28:22 | 'gi' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:19:28:22 | 'gi' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:19:28:22 | 'gi' | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/BadTagFilter/tst.js:28:19:28:22 | 'gi' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:1:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | 'arguments' object of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | 'arguments' object of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | 'arguments' object of function badEncode | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | 'arguments' object of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | 'arguments' object of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | exceptional return of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | exceptional return of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | exceptional return of function badEncode | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | exceptional return of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | exceptional return of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | functio ... p;");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | functio ... p;");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | functio ... p;");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | return of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | return of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | return of function badEncode | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | return of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:1:5:1 | return of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:10:1:18 | badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:10:1:18 | badEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:10:1:18 | badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:1:20:1:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:10 | s | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:10 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:18 | s.replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:18 | s.replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | exceptional return of s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | exceptional return of s.repla ... quot;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | exceptional return of s.repla ... quot;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | exceptional return of s.repla ... quot;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | exceptional return of s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | s.repla ... quot;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | s.repla ... quot;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | s.repla ... quot;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:2:34 | s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:18 | s.repla ... replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:18 | s.repla ... replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | exceptional return of s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | exceptional return of s.repla ... apos;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | exceptional return of s.repla ... apos;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | exceptional return of s.repla ... apos;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | exceptional return of s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | s.repla ... apos;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | s.repla ... apos;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | s.repla ... apos;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:3:34 | s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:18 | s.repla ... replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:18 | s.repla ... replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | exceptional return of s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | exceptional return of s.repla ... &amp;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | exceptional return of s.repla ... &amp;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | exceptional return of s.repla ... &amp;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | exceptional return of s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | s.repla ... &amp;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | s.repla ... &amp;") | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | s.repla ... &amp;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:10:4:33 | s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:12:2:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:12:2:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:12:2:18 | replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:12:2:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:12:2:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:20:2:23 | /"/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:2:26:2:33 | "&quot;" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:12:3:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:12:3:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:12:3:18 | replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:12:3:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:12:3:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:20:3:23 | /'/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:3:26:3:33 | "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:12:4:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:12:4:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:12:4:18 | replace | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:12:4:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:12:4:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:20:4:23 | /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | enclosingFunctionBody | s s replace /"/g &quot; replace /'/g &apos; replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:4:26:4:32 | "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:7:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:7:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:7:0 | this | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:7:0 | this | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:7:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | 'arguments' object of function goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | 'arguments' object of function goodEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | 'arguments' object of function goodEncode | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | 'arguments' object of function goodEncode | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | 'arguments' object of function goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | exceptional return of function goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | exceptional return of function goodEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | exceptional return of function goodEncode | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | exceptional return of function goodEncode | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | exceptional return of function goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | functio ... s;");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | functio ... s;");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | functio ... s;");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | return of function goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | return of function goodEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | return of function goodEncode | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | return of function goodEncode | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:1:11:1 | return of function goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:10:7:19 | goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:10:7:19 | goodEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:10:7:19 | goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:7:21:7:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:10 | s | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:10 | s | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:18 | s.replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:18 | s.replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | exceptional return of s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | exceptional return of s.repla ... &amp;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | exceptional return of s.repla ... &amp;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | exceptional return of s.repla ... &amp;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | exceptional return of s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | s.repla ... &amp;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | s.repla ... &amp;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | s.repla ... &amp;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:8:33 | s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:18 | s.repla ... replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | exceptional return of s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | exceptional return of s.repla ... quot;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | exceptional return of s.repla ... quot;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | exceptional return of s.repla ... quot;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | exceptional return of s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | s.repla ... quot;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | s.repla ... quot;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | s.repla ... quot;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:9:34 | s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:18 | s.repla ... replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | exceptional return of s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | exceptional return of s.repla ... apos;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | exceptional return of s.repla ... apos;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | exceptional return of s.repla ... apos;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | exceptional return of s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | s.repla ... apos;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | s.repla ... apos;") | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | s.repla ... apos;") | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:10:10:34 | s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:12:8:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:12:8:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:12:8:18 | replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:12:8:18 | replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:12:8:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:20:8:23 | /&/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:8:26:8:32 | "&amp;" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:12:9:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:12:9:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:12:9:18 | replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:12:9:18 | replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:12:9:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:20:9:23 | /"/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:9:26:9:33 | "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:12:10:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:12:10:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:12:10:18 | replace | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:12:10:18 | replace | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:12:10:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:20:10:23 | /'/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | enclosingFunctionBody | s s replace /&/g &amp; replace /"/g &quot; replace /'/g &apos; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | enclosingFunctionName | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:10:26:10:33 | "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:13:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:13:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:13:0 | this | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:13:0 | this | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:13:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | 'arguments' object of function goodDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | 'arguments' object of function goodDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | 'arguments' object of function goodDecode | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | 'arguments' object of function goodDecode | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | 'arguments' object of function goodDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | exceptional return of function goodDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | exceptional return of function goodDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | exceptional return of function goodDecode | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | exceptional return of function goodDecode | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | exceptional return of function goodDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | functio ... "&");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | functio ... "&");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | functio ... "&");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | return of function goodDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | return of function goodDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | return of function goodDecode | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | return of function goodDecode | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:1:17:1 | return of function goodDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:10:13:19 | goodDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:10:13:19 | goodDecode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:10:13:19 | goodDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:13:21:13:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:10 | s | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:10 | s | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:18 | s.replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:18 | s.replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | exceptional return of s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | exceptional return of s.repla ... , "\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | exceptional return of s.repla ... , "\\"") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | exceptional return of s.repla ... , "\\"") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | exceptional return of s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | s.repla ... , "\\"") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | s.repla ... , "\\"") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | s.repla ... , "\\"") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:14:35 | s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:18 | s.repla ... replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | exceptional return of s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | exceptional return of s.repla ... g, "'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | exceptional return of s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | s.repla ... g, "'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | s.repla ... g, "'") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | s.repla ... g, "'") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:15:34 | s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:18 | s.repla ... replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | exceptional return of s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | exceptional return of s.repla ... g, "&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | exceptional return of s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | s.repla ... g, "&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | s.repla ... g, "&") | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | s.repla ... g, "&") | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:10:16:33 | s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:12:14:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:12:14:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:12:14:18 | replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:12:14:18 | replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:12:14:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:20:14:28 | /&quot;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:14:31:14:34 | "\\"" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:12:15:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:12:15:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:12:15:18 | replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:12:15:18 | replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:12:15:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:20:15:28 | /&apos;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:15:31:15:33 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:12:16:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:12:16:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:12:16:18 | replace | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:12:16:18 | replace | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:12:16:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:20:16:27 | /&amp;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | enclosingFunctionBody | s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | enclosingFunctionName | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:16:30:16:32 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:19:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:19:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:19:0 | this | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:19:0 | this | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:19:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | 'arguments' object of function badDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | 'arguments' object of function badDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | 'arguments' object of function badDecode | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | 'arguments' object of function badDecode | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | 'arguments' object of function badDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | exceptional return of function badDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | exceptional return of function badDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | exceptional return of function badDecode | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | exceptional return of function badDecode | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | exceptional return of function badDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | functio ... "'");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | functio ... "'");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | functio ... "'");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | return of function badDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | return of function badDecode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | return of function badDecode | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | return of function badDecode | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:1:23:1 | return of function badDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:10:19:18 | badDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:10:19:18 | badDecode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:10:19:18 | badDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:19:20:19:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:10 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:10 | s | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:18 | s.replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:18 | s.replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | exceptional return of s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | exceptional return of s.repla ... g, "&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | exceptional return of s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | s.repla ... g, "&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | s.repla ... g, "&") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | s.repla ... g, "&") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:20:33 | s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:18 | s.repla ... replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | exceptional return of s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | exceptional return of s.repla ... , "\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | exceptional return of s.repla ... , "\\"") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | exceptional return of s.repla ... , "\\"") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | exceptional return of s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | s.repla ... , "\\"") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | s.repla ... , "\\"") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | s.repla ... , "\\"") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:21:35 | s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:18 | s.repla ... replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | exceptional return of s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | exceptional return of s.repla ... g, "'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | exceptional return of s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | s.repla ... g, "'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | s.repla ... g, "'") | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | s.repla ... g, "'") | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:10:22:34 | s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:12:20:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:12:20:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:12:20:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:12:20:18 | replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:12:20:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:20:20:27 | /&amp;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:20:30:20:32 | "&" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:12:21:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:12:21:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:12:21:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:12:21:18 | replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:12:21:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:20:21:28 | /&quot;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:21:31:21:34 | "\\"" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:12:22:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:12:22:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:12:22:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:12:22:18 | replace | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:12:22:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:20:22:28 | /&apos;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | enclosingFunctionBody | s s replace /&amp;/g & replace /&quot;/g " replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | enclosingFunctionName | badDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:22:31:22:33 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:25:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:25:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:25:0 | this | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:25:0 | this | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:25:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | 'arguments' object of function cleverEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | 'arguments' object of function cleverEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | 'arguments' object of function cleverEncode | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | 'arguments' object of function cleverEncode | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | 'arguments' object of function cleverEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | exceptional return of function cleverEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | exceptional return of function cleverEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | exceptional return of function cleverEncode | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | exceptional return of function cleverEncode | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | exceptional return of function cleverEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | functio ... p;');\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | functio ... p;');\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | functio ... p;');\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | return of function cleverEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | return of function cleverEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | return of function cleverEncode | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | return of function cleverEncode | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:1:27:1 | return of function cleverEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:10:25:21 | cleverEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:10:25:21 | cleverEncode | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:10:25:21 | cleverEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:25:23:25:26 | code | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:15 | code | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:15 | code | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:15 | code | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:15 | code | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:15 | code | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:23 | code.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:23 | code.replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:23 | code.replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:23 | code.replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:23 | code.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | code.re ... '&lt;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | code.re ... '&lt;') | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | code.re ... '&lt;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | code.re ... '&lt;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | code.re ... '&lt;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | exceptional return of code.re ... '&lt;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | exceptional return of code.re ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | exceptional return of code.re ... '&lt;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | exceptional return of code.re ... '&lt;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:37 | exceptional return of code.re ... '&lt;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:45 | code.re ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:45 | code.re ... replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:45 | code.re ... replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:45 | code.re ... replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:45 | code.re ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | code.re ... '&gt;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | code.re ... '&gt;') | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | code.re ... '&gt;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | code.re ... '&gt;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | code.re ... '&gt;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | exceptional return of code.re ... '&gt;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | exceptional return of code.re ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | exceptional return of code.re ... '&gt;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | exceptional return of code.re ... '&gt;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:59 | exceptional return of code.re ... '&gt;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:67 | code.re ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:67 | code.re ... replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:67 | code.re ... replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:67 | code.re ... replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:67 | code.re ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | code.re ... &amp;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | code.re ... &amp;') | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | code.re ... &amp;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | code.re ... &amp;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | code.re ... &amp;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | exceptional return of code.re ... &amp;') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | exceptional return of code.re ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | exceptional return of code.re ... &amp;') | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | exceptional return of code.re ... &amp;') | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:12:26:94 | exceptional return of code.re ... &amp;') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:17:26:23 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:17:26:23 | replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:17:26:23 | replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:17:26:23 | replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:17:26:23 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | CalleeFlexibleAccessPath | code.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:25:26:28 | /</g | receiverName | code |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | CalleeFlexibleAccessPath | code.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:31:26:36 | '&lt;' | receiverName | code |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:39:26:45 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:39:26:45 | replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:39:26:45 | replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:39:26:45 | replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:39:26:45 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | CalleeFlexibleAccessPath | code.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:47:26:50 | />/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | CalleeFlexibleAccessPath | code.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:53:26:58 | '&gt;' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:61:26:67 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:61:26:67 | replace | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:61:26:67 | replace | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:61:26:67 | replace | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:61:26:67 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | CalleeFlexibleAccessPath | code.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:69:26:84 | /&(?![\\w\\#]+;)/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | CalleeFlexibleAccessPath | code.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | contextSurroundingFunctionParameters | (code) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | enclosingFunctionBody | code code replace /</g &lt; replace />/g &gt; replace /&(?![\\w\\#]+;)/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | enclosingFunctionName | cleverEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:26:87:26:93 | '&amp;' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:29:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:29:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:29:0 | this | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:29:0 | this | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:29:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | 'arguments' object of function badDecode2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | 'arguments' object of function badDecode2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | 'arguments' object of function badDecode2 | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | 'arguments' object of function badDecode2 | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | 'arguments' object of function badDecode2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | exceptional return of function badDecode2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | exceptional return of function badDecode2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | exceptional return of function badDecode2 | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | exceptional return of function badDecode2 | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | exceptional return of function badDecode2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | functio ... "'");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | functio ... "'");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | functio ... "'");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | return of function badDecode2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | return of function badDecode2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | return of function badDecode2 | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | return of function badDecode2 | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:1:33:1 | return of function badDecode2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:10:29:19 | badDecode2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:10:29:19 | badDecode2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:10:29:19 | badDecode2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:29:21:29:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:10 | s | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:10 | s | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:18 | s.replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:18 | s.replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | exceptional return of s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | exceptional return of s.repla ... g, "&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | exceptional return of s.repla ... g, "&") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | exceptional return of s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | s.repla ... g, "&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | s.repla ... g, "&") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | s.repla ... g, "&") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:30:33 | s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:18 | s.repla ... replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | exceptional return of s.repla ... "else") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | exceptional return of s.repla ... "else") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | exceptional return of s.repla ... "else") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | exceptional return of s.repla ... "else") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | exceptional return of s.repla ... "else") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | s.repla ... "else") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | s.repla ... "else") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | s.repla ... "else") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | s.repla ... "else") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:31:43 | s.repla ... "else") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:18 | s.repla ... replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:18 | s.repla ... replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | exceptional return of s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | exceptional return of s.repla ... g, "'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | exceptional return of s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | s.repla ... g, "'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | s.repla ... g, "'") | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | s.repla ... g, "'") | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:10:32:34 | s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:12:30:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:12:30:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:12:30:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:12:30:18 | replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:12:30:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:20:30:27 | /&amp;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:30:30:30:32 | "&" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:12:31:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:12:31:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:12:31:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:12:31:18 | replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:12:31:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:20:31:34 | /s?ome\|thin*g/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:31:37:31:42 | "else" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:12:32:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:12:32:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:12:32:18 | replace | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:12:32:18 | replace | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:12:32:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:20:32:28 | /&apos;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | enclosingFunctionBody | s s replace /&amp;/g & replace /s?ome\|thin*g/g else replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | enclosingFunctionName | badDecode2 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:32:31:32:33 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:35:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:35:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:35:0 | this | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:35:0 | this | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:35:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | 'arguments' object of function goodDecodeInLoop | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | 'arguments' object of function goodDecodeInLoop | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | 'arguments' object of function goodDecodeInLoop | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | 'arguments' object of function goodDecodeInLoop | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | 'arguments' object of function goodDecodeInLoop | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | exceptional return of function goodDecodeInLoop | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | exceptional return of function goodDecodeInLoop | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | exceptional return of function goodDecodeInLoop | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | exceptional return of function goodDecodeInLoop | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | exceptional return of function goodDecodeInLoop | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | functio ...  res;\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | functio ...  res;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | functio ...  res;\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | return of function goodDecodeInLoop | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | return of function goodDecodeInLoop | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | return of function goodDecodeInLoop | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | return of function goodDecodeInLoop | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:1:44:1 | return of function goodDecodeInLoop | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:10:35:25 | goodDecodeInLoop | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:10:35:25 | goodDecodeInLoop | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:10:35:25 | goodDecodeInLoop | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:35:27:35:28 | ss | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:9 | res | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:9 | res | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:9 | res | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:9 | res | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:9 | res | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res = [] | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res = [] | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res = [] | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res = [] | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:7:36:14 | res = [] | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:13:36:14 | [] | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:13:36:14 | [] | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:13:36:14 | [] | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:13:36:14 | [] | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:36:13:36:14 | [] | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:12:37:12 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:17:37:18 | ss | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:17:37:18 | ss | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:17:37:18 | ss | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:17:37:18 | ss | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:37:17:37:18 | ss | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:38:5 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:38:5 | s | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:38:5 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:38:5 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:38:5 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s = s.r ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s = s.r ... g, "&") | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s = s.r ... g, "&") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s = s.r ... g, "&") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:5:40:32 | s = s.r ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:9 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:9 | s | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:9 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:9 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:9 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:17 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:17 | s.replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:17 | s.replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:17 | s.replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:17 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | exceptional return of s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | exceptional return of s.repla ... , "\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | exceptional return of s.repla ... , "\\"") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | exceptional return of s.repla ... , "\\"") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | exceptional return of s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | s.repla ... , "\\"") | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | s.repla ... , "\\"") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | s.repla ... , "\\"") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:38:34 | s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:17 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:17 | s.repla ... replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:17 | s.repla ... replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:17 | s.repla ... replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:17 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | exceptional return of s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | exceptional return of s.repla ... g, "'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | exceptional return of s.repla ... g, "'") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | exceptional return of s.repla ... g, "'") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | exceptional return of s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | s.repla ... g, "'") | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | s.repla ... g, "'") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | s.repla ... g, "'") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:39:33 | s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:17 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:17 | s.repla ... replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:17 | s.repla ... replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:17 | s.repla ... replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:17 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | exceptional return of s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | exceptional return of s.repla ... g, "&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | exceptional return of s.repla ... g, "&") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | exceptional return of s.repla ... g, "&") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | exceptional return of s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | s.repla ... g, "&") | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | s.repla ... g, "&") | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | s.repla ... g, "&") | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:9:40:32 | s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:11:38:17 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:11:38:17 | replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:11:38:17 | replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:11:38:17 | replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:11:38:17 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:19:38:27 | /&quot;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:38:30:38:33 | "\\"" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:11:39:17 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:11:39:17 | replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:11:39:17 | replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:11:39:17 | replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:11:39:17 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:19:39:27 | /&apos;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:39:30:39:32 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:11:40:17 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:11:40:17 | replace | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:11:40:17 | replace | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:11:40:17 | replace | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:11:40:17 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:19:40:26 | /&amp;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:40:29:40:31 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:7 | res | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:7 | res | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:7 | res | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:7 | res | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:7 | res | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:12 | res.push | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:12 | res.push | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:12 | res.push | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:12 | res.push | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:12 | res.push | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | exceptional return of res.push(s) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | exceptional return of res.push(s) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | exceptional return of res.push(s) | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | exceptional return of res.push(s) | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | exceptional return of res.push(s) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | res.push(s) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | res.push(s) | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | res.push(s) | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | res.push(s) | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:5:41:15 | res.push(s) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:9:41:12 | push | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:9:41:12 | push | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:9:41:12 | push | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:9:41:12 | push | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:9:41:12 | push | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | CalleeFlexibleAccessPath | res.push |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:41:14:41:14 | s | receiverName | res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:43:10:43:12 | res | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:43:10:43:12 | res | contextSurroundingFunctionParameters | (ss) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:43:10:43:12 | res | enclosingFunctionBody | ss res s ss s s replace /&quot;/g " replace /&apos;/g ' replace /&amp;/g & res push s res |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:43:10:43:12 | res | enclosingFunctionName | goodDecodeInLoop |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:43:10:43:12 | res | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:46:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:46:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:46:0 | this | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:46:0 | this | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:46:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | 'arguments' object of function badDecode3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | 'arguments' object of function badDecode3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | 'arguments' object of function badDecode3 | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | 'arguments' object of function badDecode3 | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | 'arguments' object of function badDecode3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | exceptional return of function badDecode3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | exceptional return of function badDecode3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | exceptional return of function badDecode3 | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | exceptional return of function badDecode3 | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | exceptional return of function badDecode3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | functio ... "'");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | functio ... "'");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | functio ... "'");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | return of function badDecode3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | return of function badDecode3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | return of function badDecode3 | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | return of function badDecode3 | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:1:50:1 | return of function badDecode3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:10:46:19 | badDecode3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:10:46:19 | badDecode3 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:10:46:19 | badDecode3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:46:21:46:21 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:3 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:3 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:3 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:3 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s = s.r ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s = s.r ... g, "&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s = s.r ... g, "&") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s = s.r ... g, "&") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:3:47:30 | s = s.r ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:7 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:7 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:7 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:7 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:15 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:15 | s.replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:15 | s.replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:15 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | exceptional return of s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | exceptional return of s.repla ... g, "&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | exceptional return of s.repla ... g, "&") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | exceptional return of s.repla ... g, "&") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | exceptional return of s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | s.repla ... g, "&") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | s.repla ... g, "&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | s.repla ... g, "&") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | s.repla ... g, "&") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:7:47:30 | s.repla ... g, "&") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:9:47:15 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:9:47:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:9:47:15 | replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:9:47:15 | replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:9:47:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:17:47:24 | /&amp;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:47:27:47:29 | "&" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:3 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:3 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:3 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:3 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s = s.r ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s = s.r ... , "\\"") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s = s.r ... , "\\"") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s = s.r ... , "\\"") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:3:48:32 | s = s.r ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:7 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:7 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:7 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:7 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:15 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:15 | s.replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:15 | s.replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:15 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | exceptional return of s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | exceptional return of s.repla ... , "\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | exceptional return of s.repla ... , "\\"") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | exceptional return of s.repla ... , "\\"") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | exceptional return of s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | s.repla ... , "\\"") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | s.repla ... , "\\"") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | s.repla ... , "\\"") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | s.repla ... , "\\"") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:7:48:32 | s.repla ... , "\\"") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:9:48:15 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:9:48:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:9:48:15 | replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:9:48:15 | replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:9:48:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:17:48:25 | /&quot;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:48:28:48:31 | "\\"" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:10 | s | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:10 | s | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:18 | s.replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:18 | s.replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | exceptional return of s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | exceptional return of s.repla ... g, "'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | exceptional return of s.repla ... g, "'") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | exceptional return of s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | s.repla ... g, "'") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | s.repla ... g, "'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | s.repla ... g, "'") | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | s.repla ... g, "'") | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:10:49:34 | s.repla ... g, "'") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:12:49:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:12:49:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:12:49:18 | replace | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:12:49:18 | replace | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:12:49:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:20:49:28 | /&apos;/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | enclosingFunctionBody | s s s replace /&amp;/g & s s replace /&quot;/g " s replace /&apos;/g ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | enclosingFunctionName | badDecode3 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:49:31:49:33 | "'" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:52:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:52:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:52:0 | this | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:52:0 | this | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:52:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | 'arguments' object of function badUnescape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | 'arguments' object of function badUnescape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | 'arguments' object of function badUnescape | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | 'arguments' object of function badUnescape | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | 'arguments' object of function badUnescape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | exceptional return of function badUnescape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | exceptional return of function badUnescape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | exceptional return of function badUnescape | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | exceptional return of function badUnescape | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | exceptional return of function badUnescape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | functio ... \\"');\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | functio ... \\"');\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | functio ... \\"');\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | return of function badUnescape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | return of function badUnescape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | return of function badUnescape | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | return of function badUnescape | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:1:56:1 | return of function badUnescape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:10:52:20 | badUnescape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:10:52:20 | badUnescape | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:10:52:20 | badUnescape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:52:22:52:22 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:10 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:10 | s | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:18 | s.replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:18 | s.replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | exceptional return of s.repla ... , '\\\\') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | exceptional return of s.repla ... , '\\\\') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | exceptional return of s.repla ... , '\\\\') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | exceptional return of s.repla ... , '\\\\') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | exceptional return of s.repla ... , '\\\\') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | s.repla ... , '\\\\') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | s.repla ... , '\\\\') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | s.repla ... , '\\\\') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | s.repla ... , '\\\\') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:53:33 | s.repla ... , '\\\\') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:19 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:19 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:19 | s.repla ... replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:19 | s.repla ... replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:19 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | exceptional return of s.repla ... , '\\'') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | exceptional return of s.repla ... , '\\'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | exceptional return of s.repla ... , '\\'') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | exceptional return of s.repla ... , '\\'') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | exceptional return of s.repla ... , '\\'') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | s.repla ... , '\\'') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | s.repla ... , '\\'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | s.repla ... , '\\'') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | s.repla ... , '\\'') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:54:33 | s.repla ... , '\\'') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:19 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:19 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:19 | s.repla ... replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:19 | s.repla ... replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:19 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | exceptional return of s.repla ... , '\\"') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | exceptional return of s.repla ... , '\\"') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | exceptional return of s.repla ... , '\\"') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | exceptional return of s.repla ... , '\\"') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | exceptional return of s.repla ... , '\\"') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | s.repla ... , '\\"') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | s.repla ... , '\\"') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | s.repla ... , '\\"') | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | s.repla ... , '\\"') | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:10:55:33 | s.repla ... , '\\"') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:12:53:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:12:53:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:12:53:18 | replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:12:53:18 | replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:12:53:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:20:53:26 | /\\\\\\\\/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:53:29:53:32 | '\\\\' | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:13:54:19 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:13:54:19 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:13:54:19 | replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:13:54:19 | replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:13:54:19 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:21:54:26 | /\\\\'/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:54:29:54:32 | '\\'' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:13:55:19 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:13:55:19 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:13:55:19 | replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:13:55:19 | replace | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:13:55:19 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:21:55:26 | /\\\\"/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\'/g ' replace /\\\\"/g " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | enclosingFunctionName | badUnescape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:55:29:55:32 | '\\"' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:58:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:58:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:58:0 | this | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:58:0 | this | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:58:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | 'arguments' object of function badPercentEscape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | 'arguments' object of function badPercentEscape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | 'arguments' object of function badPercentEscape | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | 'arguments' object of function badPercentEscape | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | 'arguments' object of function badPercentEscape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | exceptional return of function badPercentEscape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | exceptional return of function badPercentEscape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | exceptional return of function badPercentEscape | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | exceptional return of function badPercentEscape | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | exceptional return of function badPercentEscape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | functio ... rn s;\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | functio ... rn s;\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | return of function badPercentEscape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | return of function badPercentEscape | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | return of function badPercentEscape | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | return of function badPercentEscape | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:1:62:1 | return of function badPercentEscape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:10:58:25 | badPercentEscape | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:10:58:25 | badPercentEscape | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:10:58:25 | badPercentEscape | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:58:27:58:27 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:3 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:3 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:3 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:3 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s = s.r ...  '%26') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s = s.r ...  '%26') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s = s.r ...  '%26') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s = s.r ...  '%26') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:3:59:28 | s = s.r ...  '%26') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:7 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:7 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:7 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:7 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:15 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:15 | s.replace | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:15 | s.replace | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:15 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | exceptional return of s.repla ...  '%26') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | exceptional return of s.repla ...  '%26') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | exceptional return of s.repla ...  '%26') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | exceptional return of s.repla ...  '%26') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | exceptional return of s.repla ...  '%26') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | s.repla ...  '%26') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | s.repla ...  '%26') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | s.repla ...  '%26') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | s.repla ...  '%26') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:7:59:28 | s.repla ...  '%26') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:9:59:15 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:9:59:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:9:59:15 | replace | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:9:59:15 | replace | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:9:59:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:17:59:20 | /&/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:59:23:59:27 | '%26' | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:3 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:3 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:3 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:3 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s = s.r ...  '%25') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s = s.r ...  '%25') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s = s.r ...  '%25') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s = s.r ...  '%25') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:3:60:28 | s = s.r ...  '%25') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:7 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:7 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:7 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:7 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:15 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:15 | s.replace | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:15 | s.replace | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:15 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | exceptional return of s.repla ...  '%25') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | exceptional return of s.repla ...  '%25') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | exceptional return of s.repla ...  '%25') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | exceptional return of s.repla ...  '%25') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | exceptional return of s.repla ...  '%25') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | s.repla ...  '%25') | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | s.repla ...  '%25') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | s.repla ...  '%25') | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | s.repla ...  '%25') | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:7:60:28 | s.repla ...  '%25') | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:9:60:15 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:9:60:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:9:60:15 | replace | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:9:60:15 | replace | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:9:60:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:17:60:20 | /%/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:60:23:60:27 | '%25' | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:61:10:61:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:61:10:61:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:61:10:61:10 | s | enclosingFunctionBody | s s s replace /&/g %26 s s replace /%/g %25 s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:61:10:61:10 | s | enclosingFunctionName | badPercentEscape |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:61:10:61:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:64:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:64:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:64:0 | this | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:64:0 | this | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:64:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | 'arguments' object of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | 'arguments' object of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | 'arguments' object of function badEncode | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | 'arguments' object of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | 'arguments' object of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | exceptional return of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | exceptional return of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | exceptional return of function badEncode | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | exceptional return of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | exceptional return of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | functio ... p;");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | functio ... p;");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | functio ... p;");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | return of function badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | return of function badEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | return of function badEncode | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | return of function badEncode | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:1:71:1 | return of function badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:10:64:18 | badEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:10:64:18 | badEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:10:64:18 | badEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:64:20:64:20 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:15 | indirect1 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:15 | indirect1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:15 | indirect1 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:15 | indirect1 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:15 | indirect1 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 = /"/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 = /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 = /"/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 = /"/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:7:65:22 | indirect1 = /"/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:19:65:22 | /"/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:19:65:22 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:19:65:22 | /"/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:19:65:22 | /"/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:65:19:65:22 | /"/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:15 | indirect2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:15 | indirect2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:15 | indirect2 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:15 | indirect2 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:15 | indirect2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 = /'/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 = /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 = /'/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 = /'/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:7:66:22 | indirect2 = /'/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:19:66:22 | /'/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:19:66:22 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:19:66:22 | /'/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:19:66:22 | /'/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:66:19:66:22 | /'/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:15 | indirect3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:15 | indirect3 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:15 | indirect3 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:15 | indirect3 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:15 | indirect3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 = /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 = /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 = /&/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 = /&/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:7:67:22 | indirect3 = /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:19:67:22 | /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:19:67:22 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:19:67:22 | /&/g | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:19:67:22 | /&/g | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:67:19:67:22 | /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:10 | s | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:10 | s | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:18 | s.replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:18 | s.replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | exceptional return of s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | exceptional return of s.repla ... quot;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | exceptional return of s.repla ... quot;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | exceptional return of s.repla ... quot;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | exceptional return of s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | s.repla ... quot;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | s.repla ... quot;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | s.repla ... quot;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | s.repla ... quot;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:68:39 | s.repla ... quot;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:18 | s.repla ... replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:18 | s.repla ... replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | exceptional return of s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | exceptional return of s.repla ... apos;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | exceptional return of s.repla ... apos;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | exceptional return of s.repla ... apos;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | exceptional return of s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | s.repla ... apos;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | s.repla ... apos;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | s.repla ... apos;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | s.repla ... apos;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:69:39 | s.repla ... apos;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:18 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:18 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:18 | s.repla ... replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:18 | s.repla ... replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:18 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | exceptional return of s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | exceptional return of s.repla ... &amp;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | exceptional return of s.repla ... &amp;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | exceptional return of s.repla ... &amp;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | exceptional return of s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | s.repla ... &amp;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | s.repla ... &amp;") | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | s.repla ... &amp;") | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:10:70:38 | s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:12:68:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:12:68:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:12:68:18 | replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:12:68:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:12:68:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:20:68:28 | indirect1 | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:68:31:68:38 | "&quot;" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:12:69:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:12:69:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:12:69:18 | replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:12:69:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:12:69:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:20:69:28 | indirect2 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:69:31:69:38 | "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:12:70:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:12:70:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:12:70:18 | replace | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:12:70:18 | replace | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:12:70:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:20:70:28 | indirect3 | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | CalleeFlexibleAccessPath | s.replace().replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | enclosingFunctionBody | s indirect1 /"/g indirect2 /'/g indirect3 /&/g s replace indirect1 &quot; replace indirect2 &apos; replace indirect3 &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | enclosingFunctionName | badEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:70:31:70:37 | "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:0 | this | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:0 | this | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:1 | repl | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:1 | repl | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:1 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:1 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:73:1 | repl | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | 'arguments' object of function badEncodeWithReplacer | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | 'arguments' object of function badEncodeWithReplacer | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | 'arguments' object of function badEncodeWithReplacer | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | 'arguments' object of function badEncodeWithReplacer | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | 'arguments' object of function badEncodeWithReplacer | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | exceptional return of function badEncodeWithReplacer | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | exceptional return of function badEncodeWithReplacer | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | exceptional return of function badEncodeWithReplacer | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | exceptional return of function badEncodeWithReplacer | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | exceptional return of function badEncodeWithReplacer | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | functio ... p;");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | functio ... p;");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | functio ... p;");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | return of function badEncodeWithReplacer | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | return of function badEncodeWithReplacer | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | return of function badEncodeWithReplacer | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | return of function badEncodeWithReplacer | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:1:80:1 | return of function badEncodeWithReplacer | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:10:73:30 | badEnco ... eplacer | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:10:73:30 | badEnco ... eplacer | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:10:73:30 | badEnco ... eplacer | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:73:32:73:32 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:74:10 | repl | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl =  ... p;"\\n  } | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl =  ... p;"\\n  } | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl =  ... p;"\\n  } | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl =  ... p;"\\n  } | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:7:78:3 | repl =  ... p;"\\n  } | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:14:78:3 | {\\n    ' ... p;"\\n  } | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:14:78:3 | {\\n    ' ... p;"\\n  } | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:14:78:3 | {\\n    ' ... p;"\\n  } | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:14:78:3 | {\\n    ' ... p;"\\n  } | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:74:14:78:3 | {\\n    ' ... p;"\\n  } | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:7 | '"' | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:7 | '"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:7 | '"' | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:7 | '"' | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:7 | '"' | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:5:75:17 | '"': "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | assignedToPropName | " |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:75:10:75:17 | "&quot;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:7 | "'" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:7 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:7 | "'" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:7 | "'" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:7 | "'" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:5:76:17 | "'": "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | assignedToPropName | ' |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:76:10:76:17 | "&apos;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:7 | "&" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:7 | "&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:7 | "&" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:7 | "&" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:7 | "&" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:5:77:16 | "&": "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | assignedToPropName | & |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:77:10:77:16 | "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:10 | s | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:10 | s | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:18 | s.replace | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:18 | s.replace | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | exceptional return of s.repla ... epl[c]) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | exceptional return of s.repla ... epl[c]) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | exceptional return of s.repla ... epl[c]) | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | exceptional return of s.repla ... epl[c]) | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | exceptional return of s.repla ... epl[c]) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | s.repla ... epl[c]) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | s.repla ... epl[c]) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | s.repla ... epl[c]) | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | s.repla ... epl[c]) | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:43 | s.repla ... epl[c]) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:51 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:51 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:51 | s.repla ... replace | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:51 | s.repla ... replace | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:51 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | exceptional return of s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | exceptional return of s.repla ... &amp;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | exceptional return of s.repla ... &amp;") | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | exceptional return of s.repla ... &amp;") | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | exceptional return of s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | s.repla ... &amp;") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | s.repla ... &amp;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | s.repla ... &amp;") | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | s.repla ... &amp;") | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:10:79:66 | s.repla ... &amp;") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:12:79:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:12:79:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:12:79:18 | replace | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:12:79:18 | replace | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:12:79:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:20:79:26 | /["']/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:28 | repl | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:28 | repl | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:28 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:28 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:28 | repl | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | 'arguments' object of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | 'arguments' object of anonymous function | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | 'arguments' object of anonymous function | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | contextSurroundingFunctionParameters | (s)\n(c) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | (c) => repl[c] | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | exceptional return of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | exceptional return of anonymous function | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | exceptional return of anonymous function | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | return of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | return of anonymous function | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | return of anonymous function | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:29:79:42 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | contextSurroundingFunctionParameters | (s)\n(c) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:30:79:30 | c | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:39 | repl | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:39 | repl | contextSurroundingFunctionParameters | (s)\n(c) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:39 | repl | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:39 | repl | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:39 | repl | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:42 | repl[c] | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:42 | repl[c] | contextSurroundingFunctionParameters | (s)\n(c) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:42 | repl[c] | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:42 | repl[c] | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:36:79:42 | repl[c] | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:41:79:41 | c | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:41:79:41 | c | contextSurroundingFunctionParameters | (s)\n(c) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:41:79:41 | c | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:41:79:41 | c | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:41:79:41 | c | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:45:79:51 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:45:79:51 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:45:79:51 | replace | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:45:79:51 | replace | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:45:79:51 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:53:79:56 | /&/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | enclosingFunctionBody | s repl " &quot; ' &apos; & &amp; s replace /["']/g c repl c replace /&/g &amp; |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | enclosingFunctionName | badEncodeWithReplacer |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:79:59:79:65 | "&amp;" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:83:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:83:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:83:0 | this | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:83:0 | this | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:83:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | 'arguments' object of function badRoundtrip | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | 'arguments' object of function badRoundtrip | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | 'arguments' object of function badRoundtrip | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | 'arguments' object of function badRoundtrip | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | 'arguments' object of function badRoundtrip | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | exceptional return of function badRoundtrip | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | exceptional return of function badRoundtrip | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | exceptional return of function badRoundtrip | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | exceptional return of function badRoundtrip | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | exceptional return of function badRoundtrip | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | functio ... \\\\");\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | functio ... \\\\");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | functio ... \\\\");\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | return of function badRoundtrip | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | return of function badRoundtrip | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | return of function badRoundtrip | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | return of function badRoundtrip | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:1:85:1 | return of function badRoundtrip | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:10:83:21 | badRoundtrip | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:10:83:21 | badRoundtrip | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:10:83:21 | badRoundtrip | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:83:23:83:23 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:10 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:10 | s | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:10 | s | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:10 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:18 | s.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:18 | s.replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:18 | s.replace | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:18 | s.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | exceptional return of s.repla ... , "\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | exceptional return of s.repla ... , "\\\\") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | exceptional return of s.repla ... , "\\\\") | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | exceptional return of s.repla ... , "\\\\") | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | exceptional return of s.repla ... , "\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | s.repla ... , "\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | s.repla ... , "\\\\") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | s.repla ... , "\\\\") | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | s.repla ... , "\\\\") | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:33 | s.repla ... , "\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:41 | s.repla ... replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:41 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:41 | s.repla ... replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:41 | s.repla ... replace | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:41 | s.repla ... replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | exceptional return of s.repla ... "\\\\\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | exceptional return of s.repla ... "\\\\\\\\") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | exceptional return of s.repla ... "\\\\\\\\") | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | exceptional return of s.repla ... "\\\\\\\\") | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | exceptional return of s.repla ... "\\\\\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | s.repla ... "\\\\\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | s.repla ... "\\\\\\\\") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | s.repla ... "\\\\\\\\") | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | s.repla ... "\\\\\\\\") | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:10:84:56 | s.repla ... "\\\\\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:12:84:18 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:12:84:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:12:84:18 | replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:12:84:18 | replace | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:12:84:18 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:20:84:26 | /\\\\\\\\/g | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:29:84:32 | "\\\\" | receiverName | s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:35:84:41 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:35:84:41 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:35:84:41 | replace | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:35:84:41 | replace | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:35:84:41 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:43:84:47 | /\\\\/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | enclosingFunctionBody | s s replace /\\\\\\\\/g \\ replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | enclosingFunctionName | badRoundtrip |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:84:50:84:55 | "\\\\\\\\" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:0 | this | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:0 | this | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:1 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:1 | captured | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:1 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:1 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:87:1 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | 'arguments' object of function testWithCapturedVar | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | 'arguments' object of function testWithCapturedVar | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | 'arguments' object of function testWithCapturedVar | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | 'arguments' object of function testWithCapturedVar | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | 'arguments' object of function testWithCapturedVar | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | exceptional return of function testWithCapturedVar | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | exceptional return of function testWithCapturedVar | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | exceptional return of function testWithCapturedVar | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | exceptional return of function testWithCapturedVar | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | exceptional return of function testWithCapturedVar | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | functio ... })();\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | functio ... })();\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | functio ... })();\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | return of function testWithCapturedVar | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | return of function testWithCapturedVar | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | return of function testWithCapturedVar | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | return of function testWithCapturedVar | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:1:92:1 | return of function testWithCapturedVar | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:10:87:28 | testWithCapturedVar | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:10:87:28 | testWithCapturedVar | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:10:87:28 | testWithCapturedVar | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:87:30:87:30 | x | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:14 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured = x | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured = x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured = x | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured = x | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:7:88:18 | captured = x | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:18:88:18 | x | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:18:88:18 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:18:88:18 | x | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:18:88:18 | x | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:88:18:88:18 | x | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:4 | (functi ... );\\n  }) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:4 | (functi ... );\\n  }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:4 | (functi ... );\\n  }) | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:4 | (functi ... );\\n  }) | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:4 | (functi ... );\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | (functi ... \\n  })() | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | (functi ... \\n  })() | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | (functi ... \\n  })() | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | (functi ... \\n  })() | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | (functi ... \\n  })() | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | exceptional return of (functi ... \\n  })() | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | exceptional return of (functi ... \\n  })() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | exceptional return of (functi ... \\n  })() | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | exceptional return of (functi ... \\n  })() | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:3:91:6 | exceptional return of (functi ... \\n  })() | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | captured | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | this | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | this | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:89:3 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | 'arguments' object of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | 'arguments' object of anonymous function | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | 'arguments' object of anonymous function | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | exceptional return of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | exceptional return of anonymous function | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | exceptional return of anonymous function | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | functio ... ");\\n  } | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | functio ... ");\\n  } | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | functio ... ");\\n  } | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | functio ... ");\\n  } | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | functio ... ");\\n  } | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | return of anonymous function | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | return of anonymous function | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | return of anonymous function | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:89:4:91:3 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:12 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:12 | captured | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:12 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:12 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:12 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | capture ... "\\\\\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | capture ... "\\\\\\\\") | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | capture ... "\\\\\\\\") | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | capture ... "\\\\\\\\") | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | capture ... "\\\\\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | captured | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:5:90:46 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:23 | captured | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:23 | captured | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:23 | captured | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:23 | captured | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:23 | captured | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:31 | captured.replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:31 | captured.replace | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:31 | captured.replace | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:31 | captured.replace | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:31 | captured.replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | capture ... "\\\\\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | capture ... "\\\\\\\\") | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | capture ... "\\\\\\\\") | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | capture ... "\\\\\\\\") | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | capture ... "\\\\\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | exceptional return of capture ... "\\\\\\\\") | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | exceptional return of capture ... "\\\\\\\\") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | exceptional return of capture ... "\\\\\\\\") | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | exceptional return of capture ... "\\\\\\\\") | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:16:90:46 | exceptional return of capture ... "\\\\\\\\") | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:25:90:31 | replace | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:25:90:31 | replace | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:25:90:31 | replace | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:25:90:31 | replace | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:25:90:31 | replace | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | CalleeFlexibleAccessPath | captured.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:33:90:37 | /\\\\/g | receiverName | captured |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | CalleeFlexibleAccessPath | captured.replace |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | contextSurroundingFunctionParameters | (x)\n() |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | enclosingFunctionBody | x captured x captured captured replace /\\\\/g \\\\ |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | enclosingFunctionName | testWithCapturedVar |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:90:40:90:45 | "\\\\\\\\" | receiverName | captured |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:94:0 | this | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:94:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:94:0 | this | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:94:0 | this | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:94:0 | this | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | 'arguments' object of function encodeDecodeEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | 'arguments' object of function encodeDecodeEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | 'arguments' object of function encodeDecodeEncode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | 'arguments' object of function encodeDecodeEncode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | 'arguments' object of function encodeDecodeEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | exceptional return of function encodeDecodeEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | exceptional return of function encodeDecodeEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | exceptional return of function encodeDecodeEncode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | exceptional return of function encodeDecodeEncode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | exceptional return of function encodeDecodeEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | functio ... s)));\\n} | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | functio ... s)));\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | functio ... s)));\\n} | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | return of function encodeDecodeEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | return of function encodeDecodeEncode | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | return of function encodeDecodeEncode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | return of function encodeDecodeEncode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:1:96:1 | return of function encodeDecodeEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:10:94:27 | encodeDecodeEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:10:94:27 | encodeDecodeEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:10:94:27 | encodeDecodeEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:94:29:94:29 | s | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:18 | goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:18 | goodEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:18 | goodEncode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:18 | goodEncode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:18 | goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | exceptional return of goodEnc ... de(s))) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | exceptional return of goodEnc ... de(s))) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | exceptional return of goodEnc ... de(s))) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | exceptional return of goodEnc ... de(s))) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | exceptional return of goodEnc ... de(s))) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | goodEnc ... de(s))) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | goodEnc ... de(s))) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | goodEnc ... de(s))) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | goodEnc ... de(s))) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:9:95:45 | goodEnc ... de(s))) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:29 | goodDecode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:29 | goodDecode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:29 | goodDecode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:29 | goodDecode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:29 | goodDecode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | exceptional return of goodDec ... ode(s)) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | exceptional return of goodDec ... ode(s)) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | exceptional return of goodDec ... ode(s)) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | exceptional return of goodDec ... ode(s)) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | exceptional return of goodDec ... ode(s)) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | CalleeFlexibleAccessPath | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:20:95:44 | goodDec ... ode(s)) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:40 | goodEncode | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:40 | goodEncode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:40 | goodEncode | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:40 | goodEncode | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:40 | goodEncode | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | exceptional return of goodEncode(s) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | exceptional return of goodEncode(s) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | exceptional return of goodEncode(s) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | exceptional return of goodEncode(s) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | exceptional return of goodEncode(s) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | CalleeFlexibleAccessPath | goodDecode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:31:95:43 | goodEncode(s) | fileImports |  |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | CalleeFlexibleAccessPath | goodEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | contextFunctionInterfaces | badDecode(s)\nbadDecode2(s)\nbadDecode3(s)\nbadEncode(s)\nbadEncode(s)\nbadEncodeWithReplacer(s)\nbadPercentEscape(s)\nbadRoundtrip(s)\nbadUnescape(s)\ncleverEncode(code)\nencodeDecodeEncode(s)\ngoodDecode(s)\ngoodDecodeInLoop(ss)\ngoodEncode(s)\ntestWithCapturedVar(x) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | enclosingFunctionBody | s goodEncode goodDecode goodEncode s |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | enclosingFunctionName | encodeDecodeEncode |
| autogenerated/XssThroughDom/DoubleEscaping/tst.js:95:42:95:42 | s | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:1:0 | this | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:1:0 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:39:2 | (functi ... bly)\\n}) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:39:2 | (functi ... bly)\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:1:39:2 | (functi ... bly)\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:1 | this | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:1 | this | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | defaultPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | expanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:1:2 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | 'arguments' object of anonymous function | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | exceptional return of anonymous function | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | exceptional return of anonymous function | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | functio ... ibly)\\n} | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | functio ... ibly)\\n} | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | functio ... ibly)\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | return of anonymous function | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | return of anonymous function | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:1:2:39:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:19 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | default ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | default ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | default ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | default ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | default ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | defaultPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:6:2:45 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:23:2:45 | /<(([\\w ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:23:2:45 | /<(([\\w ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:23:2:45 | /<(([\\w ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:23:2:45 | /<(([\\w ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:2:23:2:45 | /<(([\\w ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:13 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expande ... ></$2>" | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expande ... ></$2>" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expande ... ></$2>" | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expande ... ></$2>" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expande ... ></$2>" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:6:3:27 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:17:3:27 | "<$1></$2>" | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:17:3:27 | "<$1></$2>" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:17:3:27 | "<$1></$2>" | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:17:3:27 | "<$1></$2>" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:3:17:3:27 | "<$1></$2>" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:6:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | exceptional return of html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | exceptional return of html.re ... nded\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | exceptional return of html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | html.re ... nded\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:2:9:2 | html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:7:6:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:7:6:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:7:6:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:7:6:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:6:7:6:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:7:3:7:95 | /<(?!ar ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:8:3:8:10 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | exceptional return of html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | exceptional return of html.re ... panded) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | exceptional return of html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | exceptional return of html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | exceptional return of html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | html.re ... panded) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:2:10:68 | html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:7:10:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:7:10:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:7:10:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:7:10:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:7:10:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:15:10:57 | /<(([a- ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:10:60:10:67 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:13:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | exceptional return of html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | exceptional return of html.re ... nded\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | exceptional return of html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | html.re ... nded\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:2:16:2 | html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:7:13:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:7:13:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:7:13:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:7:13:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:13:7:13:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:14:3:14:75 | /<(?!ar ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:15:3:15:10 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | exceptional return of html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | exceptional return of html.re ... panded) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | exceptional return of html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | exceptional return of html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | exceptional return of html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | html.re ... panded) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:2:17:48 | html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:7:17:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:7:17:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:7:17:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:7:17:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:7:17:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:15:17:37 | /<(([\\w ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:17:40:17:47 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:20:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | exceptional return of html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | exceptional return of html.re ... nded\\n\\t) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | exceptional return of html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | exceptional return of html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | html.re ... nded\\n\\t) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | html.re ... nded\\n\\t) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | html.re ... nded\\n\\t) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | html.re ... nded\\n\\t) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:2:23:2 | html.re ... nded\\n\\t) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:7:20:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:7:20:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:7:20:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:7:20:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:20:7:20:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:21:3:21:76 | /<(?!ar ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:22:3:22:10 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | exceptional return of html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | exceptional return of html.re ... panded) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | exceptional return of html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | exceptional return of html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | exceptional return of html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | html.re ... panded) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:2:24:49 | html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:7:24:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:7:24:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:7:24:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:7:24:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:7:24:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:15:24:38 | /<(([\\w ... )\\/>/gi | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:24:41:24:48 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | exceptional return of html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | exceptional return of html.re ... panded) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | exceptional return of html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | exceptional return of html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | exceptional return of html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | html.re ... panded) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:2:26:39 | html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:7:26:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:7:26:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:7:26:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:7:26:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:7:26:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:15:26:28 | defaultPattern | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:26:31:26:38 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | defaultPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | this | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | this | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:27:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | 'arguments' object of function getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | 'arguments' object of function getPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | 'arguments' object of function getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | 'arguments' object of function getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | 'arguments' object of function getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | exceptional return of function getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | exceptional return of function getPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | exceptional return of function getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | exceptional return of function getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | exceptional return of function getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | functio ... ern;\\n\\t} | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | functio ... ern;\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | functio ... ern;\\n\\t} | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | functio ... ern;\\n\\t} | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | functio ... ern;\\n\\t} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | return of function getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | return of function getPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | return of function getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | return of function getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:2:29:2 | return of function getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:27:11:27:20 | getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:28:10:28:23 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:28:10:28:23 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:28:10:28:23 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:28:10:28:23 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:28:10:28:23 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | exceptional return of html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | exceptional return of html.re ... panded) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | exceptional return of html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | exceptional return of html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | exceptional return of html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | html.re ... panded) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | html.re ... panded) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | html.re ... panded) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | html.re ... panded) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:2:30:37 | html.re ... panded) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:7:30:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:7:30:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:7:30:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:7:30:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:7:30:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:24 | getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:24 | getPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:24 | getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:24 | getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:24 | getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | exceptional return of getPattern() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | exceptional return of getPattern() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | exceptional return of getPattern() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | exceptional return of getPattern() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | exceptional return of getPattern() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:15:30:26 | getPattern() | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:30:29:30:36 | expanded | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | expanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | this | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | this | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:32:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | 'arguments' object of function getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | 'arguments' object of function getExpanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | 'arguments' object of function getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | 'arguments' object of function getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | 'arguments' object of function getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | exceptional return of function getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | exceptional return of function getExpanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | exceptional return of function getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | exceptional return of function getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | exceptional return of function getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | functio ... ded;\\n\\t} | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | functio ... ded;\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | functio ... ded;\\n\\t} | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | functio ... ded;\\n\\t} | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | functio ... ded;\\n\\t} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | return of function getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | return of function getExpanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | return of function getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | return of function getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:2:34:2 | return of function getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:32:11:32:21 | getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:33:10:33:17 | expanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:33:10:33:17 | expanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:33:10:33:17 | expanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:33:10:33:17 | expanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:33:10:33:17 | expanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | exceptional return of html.re ... nded()) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | exceptional return of html.re ... nded()) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | exceptional return of html.re ... nded()) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | exceptional return of html.re ... nded()) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | exceptional return of html.re ... nded()) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | html.re ... nded()) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | html.re ... nded()) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | html.re ... nded()) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | html.re ... nded()) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:2:35:44 | html.re ... nded()) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:7:35:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:7:35:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:7:35:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:7:35:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:7:35:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:15:35:28 | defaultPattern | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:41 | getExpanded | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:41 | getExpanded | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:41 | getExpanded | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:41 | getExpanded | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:41 | getExpanded | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | exceptional return of getExpanded() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | exceptional return of getExpanded() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | exceptional return of getExpanded() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | exceptional return of getExpanded() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | exceptional return of getExpanded() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:35:31:35:43 | getExpanded() | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:5 | html | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:5 | html | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:5 | html | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:5 | html | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:5 | html | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:13 | html.replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:13 | html.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:13 | html.replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:13 | html.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:13 | html.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | exceptional return of html.re ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | exceptional return of html.re ... ething) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | exceptional return of html.re ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | exceptional return of html.re ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | exceptional return of html.re ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | html.re ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | html.re ... ething) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | html.re ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | html.re ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:2:36:40 | html.re ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:7:36:13 | replace | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:7:36:13 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:7:36:13 | replace | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:7:36:13 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:7:36:13 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:15:36:28 | defaultPattern | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | CalleeFlexibleAccessPath | html.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:36:31:36:39 | something | receiverName | html |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:15 | defaultPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:15 | defaultPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:15 | defaultPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:15 | defaultPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:15 | defaultPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:21 | defaultPattern.match | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:21 | defaultPattern.match | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:21 | defaultPattern.match | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:21 | defaultPattern.match | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:21 | defaultPattern.match | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | default ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | default ... ething) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | default ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | default ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | default ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | exceptional return of default ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | exceptional return of default ... ething) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | exceptional return of default ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | exceptional return of default ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:2:37:32 | exceptional return of default ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:17:37:21 | match | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:17:37:21 | match | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:17:37:21 | match | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:17:37:21 | match | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:17:37:21 | match | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | CalleeFlexibleAccessPath | defaultPattern.match |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:37:23:37:31 | something | receiverName | defaultPattern |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:11 | getPattern | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:11 | getPattern | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:11 | getPattern | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:11 | getPattern | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:11 | getPattern | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | exceptional return of getPattern() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | exceptional return of getPattern() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | exceptional return of getPattern() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | exceptional return of getPattern() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | exceptional return of getPattern() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | getPattern() | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | getPattern() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | getPattern() | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | getPattern() | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:13 | getPattern() | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:19 | getPattern().match | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:19 | getPattern().match | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:19 | getPattern().match | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:19 | getPattern().match | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:19 | getPattern().match | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | exceptional return of getPatt ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | exceptional return of getPatt ... ething) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | exceptional return of getPatt ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | exceptional return of getPatt ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | exceptional return of getPatt ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | getPatt ... ething) | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | getPatt ... ething) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | getPatt ... ething) | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | getPatt ... ething) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:2:38:30 | getPatt ... ething) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:15:38:19 | match | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:15:38:19 | match | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:15:38:19 | match | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:15:38:19 | match | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:15:38:19 | match | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | CalleeFlexibleAccessPath | getPattern().match |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | contextFunctionInterfaces | getExpanded()\ngetPattern() |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | enclosingFunctionBody | defaultPattern /<(([\\w:]+)[^>]*)\\/>/gi expanded <$1></$2> html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(([a-z][^\\/\\0>\\x20\\t\\r\\n\\f]*)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:]+)[^>]*)\\/>/gi expanded html replace /<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([\\w:-]+)[^>]*)\\/>/gi expanded html replace /<(([\\w:-]+)[^>]*)\\/>/gi expanded html replace defaultPattern expanded getPattern defaultPattern html replace getPattern expanded getExpanded expanded html replace defaultPattern getExpanded html replace defaultPattern something defaultPattern match something getPattern match something |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/UnsafeHtmlExpansion.js:38:21:38:29 | something | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:1:1:1:0 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:1:1:1:0 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:1:7:2 | (functi ... ent;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:1:7:2 | (functi ... ent;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:1:7:2 | (functi ... ent;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:2:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:2:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:2:1 | this | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:2:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:2:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | exceptional return of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | functio ... tent;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | functio ... tent;\\n} | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | functio ... tent;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | return of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:2:7:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:2:11:2:17 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:3:3:57 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:13:3:57 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:21:3:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:21:3:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:21:3:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:21:3:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:21:3:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:29:3:52 | /<.*cri ... p.*>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:3:55:3:56 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:3:4:47 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | exceptional return of content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | exceptional return of content ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | exceptional return of content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | exceptional return of content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:13:4:47 | exceptional return of content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:21:4:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:21:4:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:21:4:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:21:4:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:21:4:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:29:4:42 | / on\\w+=".*"/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:4:45:4:46 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:3:5:49 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | exceptional return of content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | exceptional return of content ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | exceptional return of content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | exceptional return of content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:13:5:49 | exceptional return of content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:21:5:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:21:5:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:21:5:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:21:5:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:21:5:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:29:5:44 | / on\\w+=\\'.*\\'/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:5:47:5:48 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:6:10:6:16 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:6:10:6:16 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:6:10:6:16 | content | enclosingFunctionBody | content content content replace /<.*cript.*\\/scrip.*>/gi  content content replace / on\\w+=".*"/g  content content replace / on\\w+=\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:6:10:6:16 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:6:10:6:16 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:1:14:2 | (functi ... ent;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:1:14:2 | (functi ... ent;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:1:14:2 | (functi ... ent;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:8:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:8:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:8:1 | this | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:8:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:8:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | exceptional return of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | functio ... tent;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | functio ... tent;\\n} | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | functio ... tent;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | return of anonymous function | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:2:14:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:8:11:8:17 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:3:9:47 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:13:9:47 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:21:9:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:21:9:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:21:9:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:21:9:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:21:9:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:29:9:42 | /<.*cript.*/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:9:45:9:46 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:3:10:49 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | exceptional return of content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | exceptional return of content ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | exceptional return of content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | exceptional return of content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:13:10:49 | exceptional return of content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:21:10:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:21:10:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:21:10:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:21:10:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:21:10:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:29:10:44 | /.on\\w+=.*".*"/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:10:47:10:48 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:9 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:3:11:51 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:19 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:27 | content.replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | exceptional return of content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | exceptional return of content ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | exceptional return of content ... /g, "") | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | exceptional return of content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:13:11:51 | exceptional return of content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:21:11:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:21:11:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:21:11:27 | replace | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:21:11:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:21:11:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:29:11:46 | /.on\\w+=.*\\'.*\\'/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:11:49:11:50 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:13:10:13:16 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:13:10:13:16 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:13:10:13:16 | content | enclosingFunctionBody | content content content replace /<.*cript.*/gi  content content replace /.on\\w+=.*".*"/g  content content replace /.on\\w+=.*\\'.*\\'/g  content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:13:10:13:16 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:13:10:13:16 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:1:21:2 | (functi ... ext;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:1:21:2 | (functi ... ext;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:1:21:2 | (functi ... ext;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:17:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:17:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:17:1 | this | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:17:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:17:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | exceptional return of anonymous function | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | functio ... Text;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | functio ... Text;\\n} | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | functio ... Text;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | return of anonymous function | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:2:21:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:17:11:17:22 | responseText | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:13 | rscript | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:13 | rscript | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:13 | rscript | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:13 | rscript | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:13 | rscript | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript ... ipt>/gi | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript ... ipt>/gi | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:7:18:69 | rscript ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:17:18:69 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:17:18:69 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:17:18:69 | /<scrip ... ipt>/gi | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:17:18:69 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:18:17:18:69 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:14 | responseText | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:14 | responseText | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:14 | responseText | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:14 | responseText | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:14 | responseText | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:22 | responseText.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:22 | responseText.replace | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:22 | responseText.replace | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:22 | responseText.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:22 | responseText.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | exceptional return of respons ... pt, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | exceptional return of respons ... pt, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | exceptional return of respons ... pt, "") | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | exceptional return of respons ... pt, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | exceptional return of respons ... pt, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | respons ... pt, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | respons ... pt, "") | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | respons ... pt, "") | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | respons ... pt, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:3:19:35 | respons ... pt, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:16:19:22 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:16:19:22 | replace | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:16:19:22 | replace | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:16:19:22 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:16:19:22 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | CalleeFlexibleAccessPath | responseText.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:24:19:30 | rscript | receiverName | responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | CalleeFlexibleAccessPath | responseText.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:19:33:19:34 | "" | receiverName | responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:20:10:20:21 | responseText | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:20:10:20:21 | responseText | contextSurroundingFunctionParameters | (responseText) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:20:10:20:21 | responseText | enclosingFunctionBody | responseText rscript /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi responseText replace rscript  responseText |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:20:10:20:21 | responseText | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:20:10:20:21 | responseText | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:1:27:2 | (functi ... ext;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:1:27:2 | (functi ... ext;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:1:27:2 | (functi ... ext;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:24:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:24:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:24:1 | this | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:24:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:24:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | 'arguments' object of anonymous function | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | exceptional return of anonymous function | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | functio ... text;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | functio ... text;\\n} | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | functio ... text;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | return of anonymous function | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:2:27:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:24:11:24:14 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:6 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:6 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:6 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:6 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:6 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text =  ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text =  ... /g, "") | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text =  ... /g, "") | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text =  ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:3:25:40 | text =  ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:13 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:13 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:13 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:13 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:13 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:21 | text.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:21 | text.replace | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:21 | text.replace | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:21 | text.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:21 | text.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | exceptional return of text.re ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | exceptional return of text.re ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | exceptional return of text.re ... /g, "") | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | exceptional return of text.re ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | exceptional return of text.re ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | text.re ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | text.re ... /g, "") | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | text.re ... /g, "") | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | text.re ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:10:25:40 | text.re ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:15:25:21 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:15:25:21 | replace | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:15:25:21 | replace | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:15:25:21 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:15:25:21 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | CalleeFlexibleAccessPath | text.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:23:25:35 | /<!--\|--!?>/g | receiverName | text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | CalleeFlexibleAccessPath | text.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:25:38:25:39 | "" | receiverName | text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:26:10:26:13 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:26:10:26:13 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:26:10:26:13 | text | enclosingFunctionBody | text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:26:10:26:13 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:26:10:26:13 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:1:34:2 | (functi ... ext;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:1:34:2 | (functi ... ext;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:1:34:2 | (functi ... ext;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:28:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:28:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:28:1 | this | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:28:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:28:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | 'arguments' object of anonymous function | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | exceptional return of anonymous function | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | functio ... text;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | functio ... text;\\n} | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | functio ... text;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | return of anonymous function | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:2:34:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:28:11:28:14 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:10 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:10 | text | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:10 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:10 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:10 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:22 | /<!--\|--!?>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:22 | /<!--\|--!?>/g | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:22 | /<!--\|--!?>/g | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:22 | /<!--\|--!?>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:22 | /<!--\|--!?>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:27 | /<!--\|--!?>/g.test | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:27 | /<!--\|--!?>/g.test | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:27 | /<!--\|--!?>/g.test | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:27 | /<!--\|--!?>/g.test | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:27 | /<!--\|--!?>/g.test | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | /<!--\|- ... t(text) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | /<!--\|- ... t(text) | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | /<!--\|- ... t(text) | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | /<!--\|- ... t(text) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | /<!--\|- ... t(text) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | exceptional return of /<!--\|- ... t(text) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | exceptional return of /<!--\|- ... t(text) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | exceptional return of /<!--\|- ... t(text) | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | exceptional return of /<!--\|- ... t(text) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:10:29:33 | exceptional return of /<!--\|- ... t(text) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:24:29:27 | test | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:24:29:27 | test | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:24:29:27 | test | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:24:29:27 | test | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:24:29:27 | test | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | CalleeFlexibleAccessPath | ?.test |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:29:29:29:32 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:8 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:8 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:8 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:8 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:8 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text =  ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text =  ... /g, "") | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text =  ... /g, "") | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text =  ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:5:30:42 | text =  ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:15 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:15 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:15 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:15 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:15 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:23 | text.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:23 | text.replace | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:23 | text.replace | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:23 | text.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:23 | text.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | exceptional return of text.re ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | exceptional return of text.re ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | exceptional return of text.re ... /g, "") | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | exceptional return of text.re ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | exceptional return of text.re ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | text.re ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | text.re ... /g, "") | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | text.re ... /g, "") | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | text.re ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:12:30:42 | text.re ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:17:30:23 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:17:30:23 | replace | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:17:30:23 | replace | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:17:30:23 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:17:30:23 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | CalleeFlexibleAccessPath | text.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:25:30:37 | /<!--\|--!?>/g | receiverName | text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | CalleeFlexibleAccessPath | text.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:30:40:30:41 | "" | receiverName | text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:33:10:33:13 | text | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:33:10:33:13 | text | contextSurroundingFunctionParameters | (text) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:33:10:33:13 | text | enclosingFunctionBody | text /<!--\|--!?>/g test text text text replace /<!--\|--!?>/g  text |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:33:10:33:13 | text | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:33:10:33:13 | text | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:1:40:2 | (functi ...  id;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:1:40:2 | (functi ...  id;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:1:40:2 | (functi ...  id;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:37:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:37:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:37:1 | this | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:37:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:37:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | 'arguments' object of anonymous function | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | exceptional return of anonymous function | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | functio ... n id;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | functio ... n id;\\n} | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | functio ... n id;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | return of anonymous function | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:2:40:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:37:11:37:12 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:4 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:4 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:4 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:4 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:4 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id = id ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id = id ... /g, "") | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id = id ... /g, "") | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id = id ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:3:38:30 | id = id ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:9 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:9 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:9 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:9 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:9 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:17 | id.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:17 | id.replace | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:17 | id.replace | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:17 | id.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:17 | id.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | exceptional return of id.repl ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | exceptional return of id.repl ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | exceptional return of id.repl ... /g, "") | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | exceptional return of id.repl ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | exceptional return of id.repl ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | id.repl ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | id.repl ... /g, "") | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | id.repl ... /g, "") | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | id.repl ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:8:38:30 | id.repl ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:11:38:17 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:11:38:17 | replace | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:11:38:17 | replace | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:11:38:17 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:11:38:17 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | CalleeFlexibleAccessPath | id.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:19:38:25 | /\\.\\./g | receiverName | id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | CalleeFlexibleAccessPath | id.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:38:28:38:29 | "" | receiverName | id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:39:10:39:11 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:39:10:39:11 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:39:10:39:11 | id | enclosingFunctionBody | id id id replace /\\.\\./g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:39:10:39:11 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:39:10:39:11 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:1:44:2 | (functi ...  id;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:1:44:2 | (functi ...  id;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:1:44:2 | (functi ...  id;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:41:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:41:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:41:1 | this | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:41:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:41:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | exceptional return of anonymous function | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | functio ... n id;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | functio ... n id;\\n} | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | functio ... n id;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | return of anonymous function | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:2:44:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:41:11:41:12 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:4 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:4 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:4 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:4 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:4 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id = id ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id = id ... /g, "") | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id = id ... /g, "") | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id = id ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:3:42:45 | id = id ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:9 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:9 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:9 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:9 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:9 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:17 | id.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:17 | id.replace | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:17 | id.replace | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:17 | id.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:17 | id.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | exceptional return of id.repl ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | exceptional return of id.repl ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | exceptional return of id.repl ... /g, "") | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | exceptional return of id.repl ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | exceptional return of id.repl ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | id.repl ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | id.repl ... /g, "") | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | id.repl ... /g, "") | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | id.repl ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:8:42:45 | id.repl ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:11:42:17 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:11:42:17 | replace | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:11:42:17 | replace | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:11:42:17 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:11:42:17 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | CalleeFlexibleAccessPath | id.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:19:42:40 | /[\\]\\[* ... \\?\\/]/g | receiverName | id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | CalleeFlexibleAccessPath | id.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:42:43:42:44 | "" | receiverName | id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:43:10:43:11 | id | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:43:10:43:11 | id | contextSurroundingFunctionParameters | (id) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:43:10:43:11 | id | enclosingFunctionBody | id id id replace /[\\]\\[*,;'"`<>\\\\?\\/]/g  id |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:43:10:43:11 | id | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:43:10:43:11 | id | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:1:50:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:1:50:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:1:50:2 | (functi ... T OK\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:47:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:47:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:47:1 | this | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:47:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:47:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | exceptional return of anonymous function | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | return of anonymous function | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:2:50:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:47:11:47:13 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:16 | REG_TRAVEL | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:16 | REG_TRAVEL | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:16 | REG_TRAVEL | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:16 | REG_TRAVEL | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:16 | REG_TRAVEL | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRA ... .\\.\\//g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRA ... .\\.\\//g | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRA ... .\\.\\//g | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRA ... .\\.\\//g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRA ... .\\.\\//g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRAVEL | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRAVEL | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRAVEL | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRAVEL | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:7:48:33 | REG_TRAVEL | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:20:48:33 | /(\\/)?\\.\\.\\//g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:20:48:33 | /(\\/)?\\.\\.\\//g | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:20:48:33 | /(\\/)?\\.\\.\\//g | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:20:48:33 | /(\\/)?\\.\\.\\//g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:48:20:48:33 | /(\\/)?\\.\\.\\//g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:5 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:5 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:5 | req | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:5 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:5 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:9 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:9 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:9 | req.url | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:9 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:9 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:43 | req.url ... EL, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:43 | req.url ... EL, "") | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:43 | req.url ... EL, "") | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:43 | req.url ... EL, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:3:49:43 | req.url ... EL, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:7:49:9 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:7:49:9 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:7:49:9 | url | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:7:49:9 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:7:49:9 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:15 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:15 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:15 | req | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:15 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:15 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:19 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:19 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:19 | req.url | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:19 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:19 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:27 | req.url.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:27 | req.url.replace | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:27 | req.url.replace | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:27 | req.url.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:27 | req.url.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | exceptional return of req.url ... EL, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | exceptional return of req.url ... EL, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | exceptional return of req.url ... EL, "") | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | exceptional return of req.url ... EL, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | exceptional return of req.url ... EL, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | assignedToPropName | url |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:13:49:43 | req.url ... EL, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:17:49:19 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:17:49:19 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:17:49:19 | url | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:17:49:19 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:17:49:19 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:21:49:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:21:49:27 | replace | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:21:49:27 | replace | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:21:49:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:21:49:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | CalleeFlexibleAccessPath | req.url.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:29:49:38 | REG_TRAVEL | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | CalleeFlexibleAccessPath | req.url.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | enclosingFunctionBody | req REG_TRAVEL /(\\/)?\\.\\.\\//g req url req url replace REG_TRAVEL  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:49:41:49:42 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:1:59:2 | (functi ... eg);\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:1:59:2 | (functi ... eg);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:1:59:2 | (functi ... eg);\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:1 | this | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:2 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:2 | beg | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:2 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:2 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:51:2 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | exceptional return of anonymous function | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | functio ... beg);\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | functio ... beg);\\n} | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | functio ... beg);\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | return of anonymous function | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:2:59:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:51:11:51:13 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:52:7:52:9 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:12 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:12 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:12 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:12 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:12 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i = 0 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i = 0 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i = 0 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i = 0 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:12:53:16 | i = 0 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:16:53:16 | 0 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:16:53:16 | 0 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:16:53:16 | 0 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:16:53:16 | 0 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:16:53:16 | 0 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | beg | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:19 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:36 | i < req.url.length | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:36 | i < req.url.length | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:36 | i < req.url.length | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:36 | i < req.url.length | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:19:53:36 | i < req.url.length | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:25 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:25 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:25 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:25 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:25 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:29 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:29 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:29 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:29 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:29 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:36 | req.url.length | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:36 | req.url.length | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:36 | req.url.length | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:36 | req.url.length | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:23:53:36 | req.url.length | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:27:53:29 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:27:53:29 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:27:53:29 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:27:53:29 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:27:53:29 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:31:53:36 | length | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:31:53:36 | length | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:31:53:36 | length | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:31:53:36 | length | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:31:53:36 | length | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | beg | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:39 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i++ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i++ | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i++ | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i++ | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:53:39:53:41 | i++ | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:11 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:11 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:11 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:11 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:11 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:15 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:15 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:15 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:15 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:15 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:18 | req.url[i] | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:18 | req.url[i] | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:18 | req.url[i] | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:18 | req.url[i] | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:18 | req.url[i] | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:26 | req.url[i] === "." | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:26 | req.url[i] === "." | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:26 | req.url[i] === "." | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:26 | req.url[i] === "." | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:26 | req.url[i] === "." | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:52 | req.url ... === "/" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:52 | req.url ... === "/" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:52 | req.url ... === "/" | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:52 | req.url ... === "/" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:9:54:52 | req.url ... === "/" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:13:54:15 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:13:54:15 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:13:54:15 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:13:54:15 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:13:54:15 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:17:54:17 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:17:54:17 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:17:54:17 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:17:54:17 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:17:54:17 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:24:54:26 | "." | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:24:54:26 | "." | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:24:54:26 | "." | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:24:54:26 | "." | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:24:54:26 | "." | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:33 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:33 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:33 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:33 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:33 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:37 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:37 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:37 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:37 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:37 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:44 | req.url[i + 1] | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:44 | req.url[i + 1] | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:44 | req.url[i + 1] | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:44 | req.url[i + 1] | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:44 | req.url[i + 1] | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:52 | req.url ... === "/" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:52 | req.url ... === "/" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:52 | req.url ... === "/" | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:52 | req.url ... === "/" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:31:54:52 | req.url ... === "/" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:35:54:37 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:35:54:37 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:35:54:37 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:35:54:37 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:35:54:37 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:39 | i | stringConcatenatedWith |  -endpoint- ? |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:43 | i + 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:43 | i + 1 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:43 | i + 1 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:43 | i + 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:39:54:43 | i + 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:43:54:43 | 1 | stringConcatenatedWith | i -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:50:54:52 | "/" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:50:54:52 | "/" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:50:54:52 | "/" | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:50:54:52 | "/" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:50:54:52 | "/" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:57 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:57 | beg | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:57 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:57 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:57 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg = i + 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg = i + 1 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg = i + 1 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg = i + 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:55:54:65 | beg = i + 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:61 | i | stringConcatenatedWith |  -endpoint- ? |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:65 | i + 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:65 | i + 1 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:65 | i + 1 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:65 | i + 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:61:54:65 | i + 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:54:65:54:65 | 1 | stringConcatenatedWith | i -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:16 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:16 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:16 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:16 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:16 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:20 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:20 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:20 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:20 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:20 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:23 | req.url[i] | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:23 | req.url[i] | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:23 | req.url[i] | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:23 | req.url[i] | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:23 | req.url[i] | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:31 | req.url[i] === "?" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:31 | req.url[i] === "?" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:31 | req.url[i] === "?" | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:31 | req.url[i] === "?" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:14:55:31 | req.url[i] === "?" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:18:55:20 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:18:55:20 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:18:55:20 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:18:55:20 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:18:55:20 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:22:55:22 | i | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:22:55:22 | i | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:22:55:22 | i | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:22:55:22 | i | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:22:55:22 | i | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:29:55:31 | "?" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:29:55:31 | "?" | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:29:55:31 | "?" | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:29:55:31 | "?" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:55:29:55:31 | "?" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:7:58:9 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:14 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:14 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:14 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:14 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:14 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:18 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:18 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:18 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:18 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:18 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:43 | req.url ... ng(beg) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:43 | req.url ... ng(beg) | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:43 | req.url ... ng(beg) | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:43 | req.url ... ng(beg) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:12:58:43 | req.url ... ng(beg) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:16:58:18 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:16:58:18 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:16:58:18 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:16:58:18 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:16:58:18 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:24 | req | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:24 | req | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:24 | req | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:24 | req | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:24 | req | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:28 | req.url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:28 | req.url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:28 | req.url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:28 | req.url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:28 | req.url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:38 | req.url.substring | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:38 | req.url.substring | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:38 | req.url.substring | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:38 | req.url.substring | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:38 | req.url.substring | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | exceptional return of req.url ... ng(beg) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | exceptional return of req.url ... ng(beg) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | exceptional return of req.url ... ng(beg) | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | exceptional return of req.url ... ng(beg) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | exceptional return of req.url ... ng(beg) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | assignedToPropName | url |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:22:58:43 | req.url ... ng(beg) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:26:58:28 | url | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:26:58:28 | url | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:26:58:28 | url | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:26:58:28 | url | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:26:58:28 | url | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:30:58:38 | substring | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:30:58:38 | substring | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:30:58:38 | substring | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:30:58:38 | substring | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:30:58:38 | substring | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | CalleeFlexibleAccessPath | req.url.substring |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | contextSurroundingFunctionParameters | (req) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | enclosingFunctionBody | req beg i 0 i req url length i req url i . req url i 1 / beg i 1 req url i ? beg req url req url substring beg |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:58:40:58:42 | beg | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:1:132:2 | (functi ... n x;\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:1:132:2 | (functi ... n x;\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:1:132:2 | (functi ... n x;\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:63:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:63:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:63:1 | this | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:63:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:63:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | exceptional return of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | functio ... rn x;\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | functio ... rn x;\\n} | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | functio ... rn x;\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | return of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:2:132:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:63:11:63:11 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:3:64:73 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:7:64:73 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:9:64:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:9:64:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:9:64:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:9:64:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:9:64:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:17:64:68 | /<scrip ... ript>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:64:71:64:72 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:3:66:56 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:7:66:56 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:9:66:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:9:66:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:9:66:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:9:66:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:9:66:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:17:66:51 | /(\\/\|\\s ... '\|")?/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:66:54:66:55 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:3:68:34 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:7:68:34 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:9:68:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:9:68:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:9:68:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:9:68:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:9:68:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:17:68:29 | /<\\/script>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:68:32:68:33 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:3:70:36 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:7:70:36 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:9:70:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:9:70:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:9:70:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:9:70:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:9:70:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:17:70:31 | /<(.)?br(.)?>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:70:34:70:35 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:3:71:30 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:7:71:30 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:9:71:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:9:71:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:9:71:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:9:71:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:9:71:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:17:71:25 | /<\\/?b>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:71:28:71:29 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:3:72:45 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:7:72:45 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:9:72:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:9:72:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:9:72:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:9:72:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:9:72:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:17:72:40 | /<(ul\|o ... ol)>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:72:43:72:44 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:3:73:35 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:7:73:35 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:9:73:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:9:73:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:9:73:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:9:73:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:9:73:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:17:73:30 | /<li><\\/li>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:73:33:73:34 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x = x.r ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x = x.r ... gm, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x = x.r ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x = x.r ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:3:75:37 | x = x.r ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | exceptional return of x.repla ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | exceptional return of x.repla ... gm, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | exceptional return of x.repla ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | exceptional return of x.repla ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | exceptional return of x.repla ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | x.repla ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | x.repla ... gm, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | x.repla ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | x.repla ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:7:75:37 | x.repla ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:9:75:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:9:75:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:9:75:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:9:75:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:9:75:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:17:75:32 | /<!--(.*?)-->/gm | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:75:35:75:36 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x = x.r ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x = x.r ... +/, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x = x.r ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x = x.r ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:3:76:35 | x = x.r ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | exceptional return of x.repla ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | exceptional return of x.repla ... +/, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | exceptional return of x.repla ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | exceptional return of x.repla ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | exceptional return of x.repla ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | x.repla ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | x.repla ... +/, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | x.repla ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | x.repla ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:7:76:35 | x.repla ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:9:76:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:9:76:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:9:76:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:9:76:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:9:76:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:17:76:30 | /\\sng-[a-z-]+/ | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:76:33:76:34 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:3:77:36 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:7:77:36 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:9:77:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:9:77:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:9:77:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:9:77:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:9:77:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:17:77:31 | /\\sng-[a-z-]+/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:77:34:77:35 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x = x.r ... , "\\n") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x = x.r ... , "\\n") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x = x.r ... , "\\n") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x = x.r ... , "\\n") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:3:79:49 | x = x.r ... , "\\n") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | exceptional return of x.repla ... , "\\n") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | exceptional return of x.repla ... , "\\n") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | exceptional return of x.repla ... , "\\n") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | exceptional return of x.repla ... , "\\n") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | exceptional return of x.repla ... , "\\n") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | x.repla ... , "\\n") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | x.repla ... , "\\n") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | x.repla ... , "\\n") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | x.repla ... , "\\n") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:7:79:49 | x.repla ... , "\\n") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:9:79:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:9:79:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:9:79:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:9:79:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:9:79:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:17:79:42 | /(<!--\\ ... ]-->)/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:79:45:79:48 | "\\n" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:3:81:58 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:7:81:58 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:9:81:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:9:81:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:9:81:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:9:81:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:9:81:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:17:81:53 | /<scrip ... ript>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:81:56:81:57 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:3:82:50 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:7:82:50 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:9:82:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:9:82:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:9:82:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:9:82:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:9:82:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:17:82:45 | /<scrip ... ript>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:82:48:82:49 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:3:83:63 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:7:83:63 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:9:83:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:9:83:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:9:83:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:9:83:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:9:83:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:17:83:58 | /<!--[\\ ... ?\\?>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:83:61:83:62 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:3:85:48 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:7:85:48 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:9:85:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:9:85:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:9:85:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:9:85:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:9:85:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:17:85:43 | /\\x2E\\x ... E\\x2F/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:85:46:85:47 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:3:87:47 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:7:87:47 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:9:87:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:9:87:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:9:87:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:9:87:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:9:87:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:17:87:42 | /<scrip ... ipt>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:87:45:87:46 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:3:89:35 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:7:89:35 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:9:89:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:9:89:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:9:89:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:9:89:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:9:89:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:17:89:30 | /^(\\.\\.\\/?)+/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:89:33:89:34 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:92:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:92:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:92:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:92:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:92:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x = x.r ... ";\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x = x.r ... ";\\n  }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x = x.r ... ";\\n  }) | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x = x.r ... ";\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:3:96:4 | x = x.r ... ";\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:92:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | exceptional return of x.repla ... ";\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | exceptional return of x.repla ... ";\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | exceptional return of x.repla ... ";\\n  }) | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | exceptional return of x.repla ... ";\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | exceptional return of x.repla ... ";\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | x.repla ... ";\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | x.repla ... ";\\n  }) | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | x.repla ... ";\\n  }) | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | x.repla ... ";\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:7:96:4 | x.repla ... ";\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:9:92:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:9:92:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:9:92:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:9:92:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:9:92:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:17:92:68 | /<scrip ... ript>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:92:70 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:92:70 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:92:70 | this | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:92:70 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:92:70 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | 'arguments' object of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | exceptional return of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | functio ... "";\\n  } | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | return of anonymous function | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:92:71:96:3 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:93:5:93:6 | $0 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:18 | unknown | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:18 | unknown | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:18 | unknown | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:18 | unknown | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:18 | unknown | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:28 | unknown ? $0 : "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:28 | unknown ? $0 : "" | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:28 | unknown ? $0 : "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:28 | unknown ? $0 : "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:12:95:28 | unknown ? $0 : "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:22:95:23 | $0 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:22:95:23 | $0 | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:22:95:23 | $0 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:22:95:23 | $0 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:22:95:23 | $0 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:27:95:28 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:27:95:28 | "" | contextSurroundingFunctionParameters | (x)\n($0) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:27:95:28 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:27:95:28 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:95:27:95:28 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:3:98:53 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:7:98:53 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:9:98:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:9:98:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:9:98:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:9:98:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:9:98:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:17:98:48 | /<\\/?([ ... >]*>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:98:51:98:52 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:3:100:28 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:7:100:28 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:9:100:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:9:100:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:9:100:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:9:100:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:9:100:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:17:100:23 | /\\.\\./g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:100:26:100:27 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:3:101:30 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:7:101:30 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:9:101:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:9:101:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:9:101:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:9:101:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:9:101:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:17:101:25 | /\\.\\.\\//g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:101:28:101:29 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:3:102:30 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:7:102:30 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:9:102:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:9:102:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:9:102:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:9:102:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:9:102:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:17:102:25 | /\\/\\.\\./g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:102:28:102:29 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:3:104:58 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:7:104:58 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:9:104:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:9:104:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:9:104:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:9:104:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:9:104:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:17:104:53 | /<scrip ... ipt>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:104:56:104:57 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:3:106:64 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:7:106:64 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:9:106:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:9:106:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:9:106:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:9:106:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:9:106:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:17:106:59 | /<(scri ... \\s*>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:106:62:106:63 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:3:107:62 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:7:107:62 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:9:107:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:9:107:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:9:107:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:9:107:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:9:107:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:17:107:57 | /\\<scri ... ipt\\>/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:107:60:107:61 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x = x.r ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x = x.r ... gm, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x = x.r ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x = x.r ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:3:108:75 | x = x.r ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | exceptional return of x.repla ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | exceptional return of x.repla ... gm, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | exceptional return of x.repla ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | exceptional return of x.repla ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | exceptional return of x.repla ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | x.repla ... gm, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | x.repla ... gm, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | x.repla ... gm, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | x.repla ... gm, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:7:108:75 | x.repla ... gm, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:9:108:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:9:108:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:9:108:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:9:108:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:9:108:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:17:108:70 | /<(scri ... le)>/gm | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:108:73:108:74 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:3:109:58 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:7:109:58 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:9:109:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:9:109:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:9:109:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:9:109:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:9:109:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:17:109:53 | /<scrip ... ipt>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:109:56:109:57 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x = x.r ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x = x.r ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x = x.r ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x = x.r ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:3:110:50 | x = x.r ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | exceptional return of x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | exceptional return of x.repla ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | exceptional return of x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | exceptional return of x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | exceptional return of x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | x.repla ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | x.repla ... gi, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | x.repla ... gi, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | x.repla ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:7:110:50 | x.repla ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:9:110:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:9:110:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:9:110:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:9:110:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:9:110:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:17:110:45 | /<scrip ... ipt>/gi | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:110:48:110:49 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:3:111:32 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:7:111:32 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:9:111:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:9:111:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:9:111:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:9:111:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:9:111:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:17:111:27 | / ?<!-- ?/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:111:30:111:31 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:3:112:50 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:7:112:50 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:9:112:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:9:112:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:9:112:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:9:112:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:9:112:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:17:112:45 | /requir ... n'\\);/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:112:48:112:49 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:3:113:41 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:7:113:41 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:9:113:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:9:113:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:9:113:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:9:113:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:9:113:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:17:113:36 | /\\.\\.\\/\\.\\.\\/lib\\//g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:113:39:113:40 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:10 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | exceptional return of x.indexOf(".") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | exceptional return of x.indexOf(".") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | exceptional return of x.indexOf(".") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | exceptional return of x.indexOf(".") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | exceptional return of x.indexOf(".") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | x.indexOf(".") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | x.indexOf(".") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | x.indexOf(".") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | x.indexOf(".") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:23 | x.indexOf(".") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:30 | x.index ...  !== -1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:30 | x.index ...  !== -1 | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:30 | x.index ...  !== -1 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:30 | x.index ...  !== -1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:10:115:30 | x.index ...  !== -1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:12:115:18 | indexOf | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:12:115:18 | indexOf | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:12:115:18 | indexOf | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:12:115:18 | indexOf | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:12:115:18 | indexOf | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | CalleeFlexibleAccessPath | x.indexOf |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:20:115:22 | "." | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:29:115:30 | -1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:29:115:30 | -1 | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:29:115:30 | -1 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:29:115:30 | -1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:29:115:30 | -1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:30:115:30 | 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:30:115:30 | 1 | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:30:115:30 | 1 | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:30:115:30 | 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:115:30:115:30 | 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:116:5 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:116:5 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:116:5 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:116:5 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:116:5 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x = x\\n  ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x = x\\n  ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x = x\\n  ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x = x\\n  ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:5:119:36 | x = x\\n  ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:116:9 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:116:9 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:116:9 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:116:9 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:116:9 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:14 | x\\n      .replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:14 | x\\n      .replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:14 | x\\n      .replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:14 | x\\n      .replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:14 | x\\n      .replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | exceptional return of x\\n      ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | exceptional return of x\\n      ... //, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | exceptional return of x\\n      ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | exceptional return of x\\n      ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | exceptional return of x\\n      ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | x\\n      ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | x\\n      ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | x\\n      ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | x\\n      ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:117:27 | x\\n      ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:14 | x\\n      ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:14 | x\\n      ... replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:14 | x\\n      ... replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:14 | x\\n      ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:14 | x\\n      ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | exceptional return of x\\n      ... /, "/") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | exceptional return of x\\n      ... /, "/") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | exceptional return of x\\n      ... /, "/") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | exceptional return of x\\n      ... /, "/") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | exceptional return of x\\n      ... /, "/") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | x\\n      ... /, "/") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | x\\n      ... /, "/") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | x\\n      ... /, "/") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | x\\n      ... /, "/") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:118:29 | x\\n      ... /, "/") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:14 | x\\n      ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:14 | x\\n      ... replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:14 | x\\n      ... replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:14 | x\\n      ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:14 | x\\n      ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | exceptional return of x\\n      ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | exceptional return of x\\n      ... //, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | exceptional return of x\\n      ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | exceptional return of x\\n      ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | exceptional return of x\\n      ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | x\\n      ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | x\\n      ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | x\\n      ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | x\\n      ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:116:9:119:36 | x\\n      ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:8:117:14 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:8:117:14 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:8:117:14 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:8:117:14 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:8:117:14 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:16:117:22 | /^\\.\\// | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:117:25:117:26 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:8:118:14 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:8:118:14 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:8:118:14 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:8:118:14 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:8:118:14 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:16:118:23 | /\\/\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:118:26:118:28 | "/" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:8:119:14 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:8:119:14 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:8:119:14 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:8:119:14 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:8:119:14 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | CalleeFlexibleAccessPath | x.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:16:119:31 | /[^\\/]*\\/\\.\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | CalleeFlexibleAccessPath | x.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:119:34:119:35 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x = x.r ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x = x.r ... +/, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x = x.r ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x = x.r ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:3:122:35 | x = x.r ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | exceptional return of x.repla ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | exceptional return of x.repla ... +/, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | exceptional return of x.repla ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | exceptional return of x.repla ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | exceptional return of x.repla ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | x.repla ... +/, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | x.repla ... +/, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | x.repla ... +/, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | x.repla ... +/, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:7:122:35 | x.repla ... +/, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:9:122:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:9:122:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:9:122:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:9:122:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:9:122:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:17:122:30 | /([^.\\s]+\\.)+/ | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:122:33:122:34 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x = x.r ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x = x.r ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x = x.r ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x = x.r ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:3:124:53 | x = x.r ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:15 | x.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:15 | x.replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:15 | x.replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:15 | x.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:15 | x.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | exceptional return of x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | exceptional return of x.repla ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | exceptional return of x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | exceptional return of x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | exceptional return of x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | x.repla ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | x.repla ... /g, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | x.repla ... /g, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | x.repla ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:7:124:53 | x.repla ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:9:124:15 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:9:124:15 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:9:124:15 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:9:124:15 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:9:124:15 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:17:124:48 | /<!\\-\\- ... \\-\\->/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:124:51:124:52 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:126:3 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:126:3 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:126:3 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:126:3 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:126:3 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x = x\\n  ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x = x\\n  ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x = x\\n  ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x = x\\n  ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:3:129:34 | x = x\\n  ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:126:7 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:126:7 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:126:7 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:126:7 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:126:7 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:12 | x\\n    .replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:12 | x\\n    .replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:12 | x\\n    .replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:12 | x\\n    .replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:12 | x\\n    .replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | exceptional return of x\\n    . ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | exceptional return of x\\n    . ... //, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | exceptional return of x\\n    . ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | exceptional return of x\\n    . ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | exceptional return of x\\n    . ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | x\\n    . ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | x\\n    . ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | x\\n    . ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | x\\n    . ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:127:25 | x\\n    . ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:12 | x\\n    . ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:12 | x\\n    . ... replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:12 | x\\n    . ... replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:12 | x\\n    . ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:12 | x\\n    . ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | exceptional return of x\\n    . ... /, "/") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | exceptional return of x\\n    . ... /, "/") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | exceptional return of x\\n    . ... /, "/") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | exceptional return of x\\n    . ... /, "/") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | exceptional return of x\\n    . ... /, "/") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | x\\n    . ... /, "/") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | x\\n    . ... /, "/") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | x\\n    . ... /, "/") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | x\\n    . ... /, "/") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:128:27 | x\\n    . ... /, "/") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:12 | x\\n    . ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:12 | x\\n    . ... replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:12 | x\\n    . ... replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:12 | x\\n    . ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:12 | x\\n    . ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | exceptional return of x\\n    . ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | exceptional return of x\\n    . ... //, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | exceptional return of x\\n    . ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | exceptional return of x\\n    . ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | exceptional return of x\\n    . ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | x\\n    . ... //, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | x\\n    . ... //, "") | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | x\\n    . ... //, "") | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | x\\n    . ... //, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:126:7:129:34 | x\\n    . ... //, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:6:127:12 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:6:127:12 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:6:127:12 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:6:127:12 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:6:127:12 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:14:127:20 | /^\\.\\// | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:127:23:127:24 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:6:128:12 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:6:128:12 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:6:128:12 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:6:128:12 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:6:128:12 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:14:128:21 | /\\/\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:128:24:128:26 | "/" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:6:129:12 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:6:129:12 | replace | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:6:129:12 | replace | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:6:129:12 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:6:129:12 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | CalleeFlexibleAccessPath | x.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:14:129:29 | /[^\\/]*\\/\\.\\.\\// | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | CalleeFlexibleAccessPath | x.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:129:32:129:33 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:131:10:131:10 | x | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:131:10:131:10 | x | contextSurroundingFunctionParameters | (x) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:131:10:131:10 | x | enclosingFunctionBody | x x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g  x x replace /(\\/\|\\s)on\\w+=(\\'\|")?[^"]*(\\'\|")?/g  x x replace /<\\/script>/g  x x replace /<(.)?br(.)?>/g  x x replace /<\\/?b>/g  x x replace /<(ul\|ol)><\\/(ul\|ol)>/gi  x x replace /<li><\\/li>/gi  x x replace /<!--(.*?)-->/gm  x x replace /\\sng-[a-z-]+/  x x replace /\\sng-[a-z-]+/g  x x replace /(<!--\\[CDATA\\[\|\\]\\]-->)/g \n x x replace /<script.+desktop\\-only.+<\\/script>/g  x x replace /<script async.+?<\\/script>/g  x x replace /<!--[\\s\\S]*?-->\|<\\?(?:php)?[\\s\\S]*?\\?>/gi  x x replace /\\x2E\\x2E\\x2F\\x2E\\x2E\\x2F/g  x x replace /<script.*>.*<\\/script>/gi  x x replace /^(\\.\\.\\/?)+/g  x x replace /<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/g $0 unknown $0  x x replace /<\\/?([a-z][a-z0-9]*)\\b[^>]*>/gi  x x replace /\\.\\./g  x x replace /\\.\\.\\//g  x x replace /\\/\\.\\./g  x x replace /<script(.*?)>([\\s\\S]*?)<\\/script>/gi  x x replace /<(script\|del)(?=[\\s>])[\\w\\W]*?<\\/\\1\\s*>/gi  x x replace /\\<script[\\s\\S]*?\\>[\\s\\S]*?\\<\\/script\\>/g  x x replace /<(script\|style\|title)[^<]+<\\/(script\|style\|title)>/gm  x x replace /<script[^>]*>([\\s\\S]*?)<\\/script>/gi  x x replace /<script[\\s\\S]*?<\\/script>/gi  x x replace / ?<!-- ?/g  x x replace /require\\('\\.\\.\\/common'\\);/g  x x replace /\\.\\.\\/\\.\\.\\/lib\\//g  x indexOf . 1 x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x x replace /([^.\\s]+\\.)+/  x x replace /<!\\-\\-DEVEL[\\d\\D]*?DEVEL\\-\\->/g  x x replace /^\\.\\//  replace /\\/\\.\\// / replace /[^\\/]*\\/\\.\\.\\//  x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:131:10:131:10 | x | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:131:10:131:10 | x | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:1:139:2 | (functi ... T OK\\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:1:139:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:1:139:2 | (functi ... T OK\\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:134:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:134:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:134:1 | this | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:134:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:134:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | 'arguments' object of anonymous function | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | exceptional return of anonymous function | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | functio ... OT OK\\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | functio ... OT OK\\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | return of anonymous function | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:2:139:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:134:12:134:18 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:8 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:8 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:8 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:8 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:8 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:16 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:16 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:16 | content.replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:16 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:16 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:2:135:44 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:10:135:16 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:10:135:16 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:10:135:16 | replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:10:135:16 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:10:135:16 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:18:135:39 | /<scrip ... ipt>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:135:42:135:43 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:8 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:8 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:8 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:8 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:8 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:16 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:16 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:16 | content.replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:16 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:16 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:2:136:46 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:10:136:16 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:10:136:16 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:10:136:16 | replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:10:136:16 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:10:136:16 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:18:136:41 | /<(scri ... ipt>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:136:44:136:45 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:8 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:8 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:8 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:8 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:8 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:16 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:16 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:16 | content.replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:16 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:16 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:2:137:48 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:10:137:16 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:10:137:16 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:10:137:16 | replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:10:137:16 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:10:137:16 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:18:137:43 | /.+<(sc ... ipt>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:137:46:137:47 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:8 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:8 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:8 | content | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:8 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:8 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:16 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:16 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:16 | content.replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:16 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:16 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:2:138:48 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:10:138:16 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:10:138:16 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:10:138:16 | replace | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:10:138:16 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:10:138:16 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:18:138:43 | /.*<(sc ... ipt>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | enclosingFunctionBody | content content replace /<script.*\\/script>/gi  content replace /<(script).*\\/script>/gi  content replace /.+<(script).*\\/script>/gi  content replace /.*<(script).*\\/script>/gi  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:138:46:138:47 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:1:155:2 | (functi ... );  \\n}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:1:155:2 | (functi ... );  \\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:1:155:2 | (functi ... );  \\n}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:141:1 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:141:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:141:1 | this | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:141:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:141:1 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | 'arguments' object of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | exceptional return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | functio ... });  \\n} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | functio ... });  \\n} | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | functio ... });  \\n} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:2:155:1 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:141:12:141:18 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:9 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content ... gi, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:3:142:62 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:19 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:27 | content.replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | content ... gi, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | content ... gi, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | exceptional return of content ... gi, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | exceptional return of content ... gi, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | exceptional return of content ... gi, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | exceptional return of content ... gi, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:13:142:62 | exceptional return of content ... gi, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:21:142:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:21:142:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:21:142:27 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:21:142:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:21:142:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:29:142:57 | /<scrip ... ipt>/gi | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:142:60:142:61 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:9 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content ...  \|\| ' ' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content ...  \|\| ' ' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content ...  \|\| ' ' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content ...  \|\| ' ' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:3:143:63 | content ...  \|\| ' ' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:19 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:27 | content.replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | content ... /g, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | exceptional return of content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | exceptional return of content ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | exceptional return of content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | exceptional return of content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:56 | exceptional return of content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:63 | content ...  \|\| ' ' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:63 | content ...  \|\| ' ' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:63 | content ...  \|\| ' ' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:63 | content ...  \|\| ' ' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:13:143:63 | content ...  \|\| ' ' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:21:143:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:21:143:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:21:143:27 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:21:143:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:21:143:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:29:143:51 | /<[a-zA ... n)*?>/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:54:143:55 | '' | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:61:143:63 | ' ' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:61:143:63 | ' ' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:61:143:63 | ' ' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:61:143:63 | ' ' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:143:61:143:63 | ' ' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:9 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content ... /g, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:3:144:91 | content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:19 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:27 | content.replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | content ... /g, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | exceptional return of content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | exceptional return of content ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | exceptional return of content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | exceptional return of content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:13:144:91 | exceptional return of content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:21:144:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:21:144:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:21:144:27 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:21:144:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:21:144:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:29:144:86 | /<(scri ... deo)>/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:144:89:144:90 | '' | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:9 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content ... /g, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:3:145:90 | content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:19 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:27 | content.replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | content ... /g, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | exceptional return of content ... /g, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | exceptional return of content ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | exceptional return of content ... /g, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | exceptional return of content ... /g, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:13:145:90 | exceptional return of content ... /g, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:21:145:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:21:145:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:21:145:27 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:21:145:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:21:145:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:29:145:85 | /<(scri ... deo)>/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:145:88:145:89 | '' | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:9 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:9 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:9 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:9 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:9 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:43 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:43 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:43 | content ... /g, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:43 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:3:146:43 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:19 | content | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:19 | content | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:19 | content | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:19 | content | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:19 | content | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:27 | content.replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:27 | content.replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:27 | content.replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:27 | content.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:27 | content.replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | content ... /g, "") | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | content ... /g, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | exceptional return of content ... /g, "") | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | exceptional return of content ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | exceptional return of content ... /g, "") | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | exceptional return of content ... /g, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:13:146:43 | exceptional return of content ... /g, "") | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:21:146:27 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:21:146:27 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:21:146:27 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:21:146:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:21:146:27 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:29:146:38 | /<[^<]*>/g | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | CalleeFlexibleAccessPath | content.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:146:41:146:42 | "" | receiverName | content |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:3 | n | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:3 | n | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:3 | n | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:3 | n | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:3 | n | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:13 | n.cloneNode | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:13 | n.cloneNode | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:13 | n.cloneNode | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:13 | n.cloneNode | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:13 | n.cloneNode | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | exceptional return of n.cloneNode(false) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | exceptional return of n.cloneNode(false) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | exceptional return of n.cloneNode(false) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | exceptional return of n.cloneNode(false) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | exceptional return of n.cloneNode(false) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | n.cloneNode(false) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | n.cloneNode(false) | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | n.cloneNode(false) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | n.cloneNode(false) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:20 | n.cloneNode(false) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:30 | n.clone ... terHTML | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:30 | n.clone ... terHTML | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:30 | n.clone ... terHTML | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:30 | n.clone ... terHTML | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:30 | n.clone ... terHTML | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:38 | n.clone ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:38 | n.clone ... replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:38 | n.clone ... replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:38 | n.clone ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:38 | n.clone ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | exceptional return of n.clone ... gi, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | exceptional return of n.clone ... gi, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | exceptional return of n.clone ... gi, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | exceptional return of n.clone ... gi, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | exceptional return of n.clone ... gi, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | n.clone ... gi, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | n.clone ... gi, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | n.clone ... gi, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | n.clone ... gi, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:99 | n.clone ... gi, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:107 | n.clone ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:107 | n.clone ... replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:107 | n.clone ... replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:107 | n.clone ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:148:107 | n.clone ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | exceptional return of n.clone ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | exceptional return of n.clone ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | exceptional return of n.clone ... );\\n  }) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | exceptional return of n.clone ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | exceptional return of n.clone ... );\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | n.clone ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | n.clone ... );\\n  }) | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | n.clone ... );\\n  }) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | n.clone ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:3:150:4 | n.clone ... );\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:5:148:13 | cloneNode | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:5:148:13 | cloneNode | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:5:148:13 | cloneNode | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:5:148:13 | cloneNode | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:5:148:13 | cloneNode | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | CalleeFlexibleAccessPath | n.cloneNode |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:15:148:19 | false | receiverName | n |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:22:148:30 | outerHTML | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:22:148:30 | outerHTML | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:22:148:30 | outerHTML | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:22:148:30 | outerHTML | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:22:148:30 | outerHTML | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:32:148:38 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:32:148:38 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:32:148:38 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:32:148:38 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:32:148:38 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:40:148:94 | /<\\/?[\\ ... ]+\|>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:97:148:98 | '' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:101:148:107 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:101:148:107 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:101:148:107 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:101:148:107 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:101:148:107 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:109:148:120 | /[\\w:\\-]+/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:148:122 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:148:122 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:148:122 | this | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:148:122 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:148:122 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | 'arguments' object of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | exceptional return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | functio ... });\\n  } | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:123:150:3 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:148:132:148:132 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:5 | o | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:5 | o | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:5 | o | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:5 | o | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:5 | o | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:10 | o.push | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:10 | o.push | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:10 | o.push | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:10 | o.push | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:10 | o.push | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | exceptional return of o.push( ... e : a}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | exceptional return of o.push( ... e : a}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | exceptional return of o.push( ... e : a}) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | exceptional return of o.push( ... e : a}) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | exceptional return of o.push( ... e : a}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | o.push( ... e : a}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | o.push( ... e : a}) | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | o.push( ... e : a}) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | o.push( ... e : a}) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:5:149:41 | o.push( ... e : a}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:7:149:10 | push | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:7:149:10 | push | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:7:149:10 | push | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:7:149:10 | push | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:7:149:10 | push | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:12:149:40 | {specif ... me : a} | receiverName | o |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:21 | specified | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:21 | specified | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:21 | specified | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:21 | specified | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:21 | specified | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:13:149:25 | specified : 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | InputAccessPathFromCallee | 0.specified |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | assignedToPropName | specified |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:25:149:25 | 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:35 | nodeName | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:35 | nodeName | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:35 | nodeName | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:35 | nodeName | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:35 | nodeName | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:28:149:39 | nodeName : a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | InputAccessPathFromCallee | 0.nodeName |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | assignedToPropName | nodeName |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:149:39:149:39 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:3 | n | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:3 | n | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:3 | n | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:3 | n | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:3 | n | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:13 | n.cloneNode | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:13 | n.cloneNode | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:13 | n.cloneNode | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:13 | n.cloneNode | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:13 | n.cloneNode | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | exceptional return of n.cloneNode(false) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | exceptional return of n.cloneNode(false) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | exceptional return of n.cloneNode(false) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | exceptional return of n.cloneNode(false) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | exceptional return of n.cloneNode(false) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | n.cloneNode(false) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | n.cloneNode(false) | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | n.cloneNode(false) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | n.cloneNode(false) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:20 | n.cloneNode(false) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:30 | n.clone ... terHTML | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:30 | n.clone ... terHTML | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:30 | n.clone ... terHTML | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:30 | n.clone ... terHTML | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:30 | n.clone ... terHTML | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:38 | n.clone ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:38 | n.clone ... replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:38 | n.clone ... replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:38 | n.clone ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:38 | n.clone ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | exceptional return of n.clone ... gi, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | exceptional return of n.clone ... gi, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | exceptional return of n.clone ... gi, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | exceptional return of n.clone ... gi, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | exceptional return of n.clone ... gi, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | n.clone ... gi, '') | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | n.clone ... gi, '') | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | n.clone ... gi, '') | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | n.clone ... gi, '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:99 | n.clone ... gi, '') | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:107 | n.clone ... replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:107 | n.clone ... replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:107 | n.clone ... replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:107 | n.clone ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:152:107 | n.clone ... replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | exceptional return of n.clone ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | exceptional return of n.clone ... );\\n  }) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | exceptional return of n.clone ... );\\n  }) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | exceptional return of n.clone ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | exceptional return of n.clone ... );\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | n.clone ... );\\n  }) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | n.clone ... );\\n  }) | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | n.clone ... );\\n  }) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | n.clone ... );\\n  }) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:3:154:4 | n.clone ... );\\n  }) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:5:152:13 | cloneNode | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:5:152:13 | cloneNode | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:5:152:13 | cloneNode | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:5:152:13 | cloneNode | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:5:152:13 | cloneNode | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | CalleeFlexibleAccessPath | n.cloneNode |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:15:152:19 | false | receiverName | n |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:22:152:30 | outerHTML | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:22:152:30 | outerHTML | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:22:152:30 | outerHTML | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:22:152:30 | outerHTML | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:22:152:30 | outerHTML | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:32:152:38 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:32:152:38 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:32:152:38 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:32:152:38 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:32:152:38 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:40:152:94 | /<\\/?[\\ ... ]+\|>/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:97:152:98 | '' | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:101:152:107 | replace | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:101:152:107 | replace | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:101:152:107 | replace | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:101:152:107 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:101:152:107 | replace | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | contextSurroundingFunctionParameters | (content) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:109:152:120 | /[\\w:\\-]+/gi | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:152:122 | this | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:152:122 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:152:122 | this | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:152:122 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:152:122 | this | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | 'arguments' object of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | 'arguments' object of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | 'arguments' object of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | exceptional return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | exceptional return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | exceptional return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | CalleeFlexibleAccessPath | n.cloneNode().outerHTML.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | functio ... });\\n  } | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | return of anonymous function | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | return of anonymous function | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:123:154:3 | return of anonymous function | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:152:132:152:132 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:5 | o | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:5 | o | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:5 | o | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:5 | o | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:5 | o | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:10 | o.push | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:10 | o.push | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:10 | o.push | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:10 | o.push | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:10 | o.push | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | exceptional return of o.push( ... e : a}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | exceptional return of o.push( ... e : a}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | exceptional return of o.push( ... e : a}) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | exceptional return of o.push( ... e : a}) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | exceptional return of o.push( ... e : a}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | o.push( ... e : a}) | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | o.push( ... e : a}) | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | o.push( ... e : a}) | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | o.push( ... e : a}) | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:5:153:41 | o.push( ... e : a}) | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:7:153:10 | push | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:7:153:10 | push | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:7:153:10 | push | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:7:153:10 | push | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:7:153:10 | push | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:12:153:40 | {specif ... me : a} | receiverName | o |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:21 | specified | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:21 | specified | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:21 | specified | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:21 | specified | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:21 | specified | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:13:153:25 | specified : 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | InputAccessPathFromCallee | 0.specified |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | assignedToPropName | specified |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:25:153:25 | 1 | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:35 | nodeName | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:35 | nodeName | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:35 | nodeName | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:35 | nodeName | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:35 | nodeName | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:28:153:39 | nodeName : a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | CalleeFlexibleAccessPath | o.push |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | InputAccessPathFromCallee | 0.nodeName |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | assignedToPropName | nodeName |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | contextFunctionInterfaces |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | contextSurroundingFunctionParameters | (content)\n(a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | enclosingFunctionBody | content content content replace /<script[\\s\\S]*?<\\/script>/gi  content content replace /<[a-zA-Z\\/](.\|\\n)*?>/g    content content replace /<(script\|iframe\|video)[\\s\\S]*?<\\/(script\|iframe\|video)>/g  content content replace /<(script\|iframe\|video)(.\|\\s)*?\\/(script\|iframe\|video)>/g  content content replace /<[^<]*>/g  n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a n cloneNode false outerHTML replace /<\\/?[\\w:\\-]+ ?\|=[\\"][^\\"]+\\"\|=\\'[^\\']+\\'\|=[\\w\\-]+\|>/gi  replace /[\\w:\\-]+/gi a o push specified 1 nodeName a |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst-multi-character-sanitization.js:153:39:153:39 | a | fileImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | require | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:1:1:1 | require | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:11 | express | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:11 | express | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:11 | express | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express ... press') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express ... press') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:5:1:32 | express ... press') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:21 | require | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:21 | require | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:21 | require | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | exceptional return of require('express') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | exceptional return of require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | exceptional return of require('express') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | require('express') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | require('express') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:15:1:32 | require('express') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | CalleeFlexibleAccessPath | require |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:1:23:1:31 | 'express' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:7 | app | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:7 | app | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:7 | app | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app = express() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app = express() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:5:2:19 | app = express() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:17 | express | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:17 | express | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:17 | express | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | exceptional return of express() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | exceptional return of express() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | exceptional return of express() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | express() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | express() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:2:11:2:19 | express() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:4:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:4:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:4:0 | this | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:4:0 | this | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:4:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | 'arguments' object of function bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | 'arguments' object of function bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | 'arguments' object of function bad1 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | 'arguments' object of function bad1 | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | 'arguments' object of function bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | exceptional return of function bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | exceptional return of function bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | exceptional return of function bad1 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | exceptional return of function bad1 | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | exceptional return of function bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | return of function bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | return of function bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | return of function bad1 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | return of function bad1 | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:1:6:1 | return of function bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:10:4:13 | bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:4:15:4:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:10 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:10 | s | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:18 | s.replace | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:18 | s.replace | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | exceptional return of s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | exceptional return of s.replace("'", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | exceptional return of s.replace("'", "") | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | exceptional return of s.replace("'", "") | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | exceptional return of s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | s.replace("'", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | s.replace("'", "") | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | s.replace("'", "") | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:10:5:27 | s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:12:5:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:12:5:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:12:5:18 | replace | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:12:5:18 | replace | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:12:5:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:20:5:22 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | enclosingFunctionName | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:5:25:5:26 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:8:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:8:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:8:0 | this | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:8:0 | this | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:8:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | 'arguments' object of function bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | 'arguments' object of function bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | 'arguments' object of function bad2 | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | 'arguments' object of function bad2 | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | 'arguments' object of function bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | exceptional return of function bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | exceptional return of function bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | exceptional return of function bad2 | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | exceptional return of function bad2 | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | exceptional return of function bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | return of function bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | return of function bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | return of function bad2 | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | return of function bad2 | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:1:10:1 | return of function bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:10:8:13 | bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:8:15:8:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:10 | s | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:10 | s | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:18 | s.replace | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:18 | s.replace | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | exceptional return of s.replace(/'/, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | exceptional return of s.replace(/'/, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | exceptional return of s.replace(/'/, "") | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | exceptional return of s.replace(/'/, "") | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | exceptional return of s.replace(/'/, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | s.replace(/'/, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | s.replace(/'/, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | s.replace(/'/, "") | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | s.replace(/'/, "") | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:10:9:27 | s.replace(/'/, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:12:9:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:12:9:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:12:9:18 | replace | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:12:9:18 | replace | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:12:9:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:20:9:22 | /'/ | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | enclosingFunctionBody | s s replace /'/  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | enclosingFunctionName | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:9:25:9:26 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:12:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:12:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:12:0 | this | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:12:0 | this | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:12:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | 'arguments' object of function bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | 'arguments' object of function bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | 'arguments' object of function bad3 | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | 'arguments' object of function bad3 | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | 'arguments' object of function bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | exceptional return of function bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | exceptional return of function bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | exceptional return of function bad3 | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | exceptional return of function bad3 | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | exceptional return of function bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | return of function bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | return of function bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | return of function bad3 | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | return of function bad3 | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:1:14:1 | return of function bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:10:12:13 | bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:12:15:12:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:10 | s | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:10 | s | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:18 | s.replace | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:18 | s.replace | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | exceptional return of s.repla ...  "\\\\'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | exceptional return of s.repla ...  "\\\\'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | exceptional return of s.repla ...  "\\\\'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | s.repla ...  "\\\\'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | s.repla ...  "\\\\'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | s.repla ...  "\\\\'") | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | s.repla ...  "\\\\'") | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:10:13:31 | s.repla ...  "\\\\'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:12:13:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:12:13:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:12:13:18 | replace | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:12:13:18 | replace | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:12:13:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:20:13:23 | /'/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | enclosingFunctionBody | s s replace /'/g \\' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | enclosingFunctionName | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:13:26:13:30 | "\\\\'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:16:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:16:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:16:0 | this | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:16:0 | this | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:16:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | 'arguments' object of function bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | 'arguments' object of function bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | 'arguments' object of function bad4 | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | 'arguments' object of function bad4 | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | 'arguments' object of function bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | exceptional return of function bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | exceptional return of function bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | exceptional return of function bad4 | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | exceptional return of function bad4 | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | exceptional return of function bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | return of function bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | return of function bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | return of function bad4 | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | return of function bad4 | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:1:18:1 | return of function bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:10:16:13 | bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:16:15:16:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:10 | s | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:10 | s | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:18 | s.replace | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:18 | s.replace | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | exceptional return of s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | exceptional return of s.repla ... "\\\\$&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | exceptional return of s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | s.repla ... "\\\\$&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | s.repla ... "\\\\$&") | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:10:17:32 | s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:12:17:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:12:17:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:12:17:18 | replace | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:12:17:18 | replace | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:12:17:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:20:17:23 | /'/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | enclosingFunctionBody | s s replace /'/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | enclosingFunctionName | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:17:26:17:31 | "\\\\$&" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:20:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:20:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:20:0 | this | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:20:0 | this | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:20:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | 'arguments' object of function bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | 'arguments' object of function bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | 'arguments' object of function bad5 | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | 'arguments' object of function bad5 | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | 'arguments' object of function bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | exceptional return of function bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | exceptional return of function bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | exceptional return of function bad5 | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | exceptional return of function bad5 | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | exceptional return of function bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | return of function bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | return of function bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | return of function bad5 | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | return of function bad5 | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:1:22:1 | return of function bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:10:20:13 | bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:20:15:20:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:10 | s | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:10 | s | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:18 | s.replace | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:18 | s.replace | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | exceptional return of s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | exceptional return of s.repla ... "\\\\$&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | exceptional return of s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | s.repla ... "\\\\$&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | s.repla ... "\\\\$&") | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:10:21:35 | s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:12:21:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:12:21:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:12:21:18 | replace | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:12:21:18 | replace | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:12:21:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:20:21:26 | /['"]/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | enclosingFunctionBody | s s replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | enclosingFunctionName | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:21:29:21:34 | "\\\\$&" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:24:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:24:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:24:0 | this | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:24:0 | this | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:24:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | 'arguments' object of function bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | 'arguments' object of function bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | 'arguments' object of function bad6 | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | 'arguments' object of function bad6 | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | 'arguments' object of function bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | exceptional return of function bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | exceptional return of function bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | exceptional return of function bad6 | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | exceptional return of function bad6 | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | exceptional return of function bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | return of function bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | return of function bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | return of function bad6 | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | return of function bad6 | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:1:26:1 | return of function bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:10:24:13 | bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:24:15:24:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:10 | s | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:10 | s | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:18 | s.replace | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:18 | s.replace | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | exceptional return of s.repla ... "\\\\$1") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | exceptional return of s.repla ... "\\\\$1") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | exceptional return of s.repla ... "\\\\$1") | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | exceptional return of s.repla ... "\\\\$1") | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | exceptional return of s.repla ... "\\\\$1") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | s.repla ... "\\\\$1") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | s.repla ... "\\\\$1") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | s.repla ... "\\\\$1") | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | s.repla ... "\\\\$1") | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:10:25:37 | s.repla ... "\\\\$1") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:12:25:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:12:25:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:12:25:18 | replace | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:12:25:18 | replace | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:12:25:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:20:25:28 | /(['"])/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | enclosingFunctionBody | s s replace /(['"])/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | enclosingFunctionName | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:25:31:25:36 | "\\\\$1" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:28:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:28:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:28:0 | this | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:28:0 | this | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:28:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | 'arguments' object of function bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | 'arguments' object of function bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | 'arguments' object of function bad7 | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | 'arguments' object of function bad7 | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | 'arguments' object of function bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | exceptional return of function bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | exceptional return of function bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | exceptional return of function bad7 | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | exceptional return of function bad7 | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | exceptional return of function bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | return of function bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | return of function bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | return of function bad7 | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | return of function bad7 | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:1:30:1 | return of function bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:10:28:13 | bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:28:15:28:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:10 | s | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:10 | s | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:18 | s.replace | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:18 | s.replace | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | exceptional return of s.repla ... "\\\\$1") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | exceptional return of s.repla ... "\\\\$1") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | exceptional return of s.repla ... "\\\\$1") | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | exceptional return of s.repla ... "\\\\$1") | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | exceptional return of s.repla ... "\\\\$1") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | s.repla ... "\\\\$1") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | s.repla ... "\\\\$1") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | s.repla ... "\\\\$1") | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | s.repla ... "\\\\$1") | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:10:29:36 | s.repla ... "\\\\$1") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:12:29:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:12:29:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:12:29:18 | replace | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:12:29:18 | replace | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:12:29:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:20:29:27 | /('\|")/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | enclosingFunctionBody | s s replace /('\|")/g \\$1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | enclosingFunctionName | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:29:30:29:35 | "\\\\$1" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:32:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:32:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:32:0 | this | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:32:0 | this | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:32:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | 'arguments' object of function bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | 'arguments' object of function bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | 'arguments' object of function bad8 | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | 'arguments' object of function bad8 | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | 'arguments' object of function bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | exceptional return of function bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | exceptional return of function bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | exceptional return of function bad8 | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | exceptional return of function bad8 | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | exceptional return of function bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | return of function bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | return of function bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | return of function bad8 | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | return of function bad8 | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:1:34:1 | return of function bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:10:32:13 | bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:32:15:32:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:10 | s | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:10 | s | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:18 | s.replace | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:18 | s.replace | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | exceptional return of s.replace('\|', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | exceptional return of s.replace('\|', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | exceptional return of s.replace('\|', '') | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | exceptional return of s.replace('\|', '') | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | exceptional return of s.replace('\|', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | s.replace('\|', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | s.replace('\|', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | s.replace('\|', '') | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | s.replace('\|', '') | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:10:33:27 | s.replace('\|', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:12:33:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:12:33:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:12:33:18 | replace | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:12:33:18 | replace | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:12:33:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:20:33:22 | '\|' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | enclosingFunctionBody | s s replace \|  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | enclosingFunctionName | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:33:25:33:26 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:36:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:36:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:36:0 | this | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:36:0 | this | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:36:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | 'arguments' object of function bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | 'arguments' object of function bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | 'arguments' object of function bad9 | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | 'arguments' object of function bad9 | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | 'arguments' object of function bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | exceptional return of function bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | exceptional return of function bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | exceptional return of function bad9 | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | exceptional return of function bad9 | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | exceptional return of function bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | return of function bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | return of function bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | return of function bad9 | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | return of function bad9 | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:1:38:1 | return of function bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:10:36:13 | bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:36:15:36:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:10 | s | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:10 | s | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:18 | s.replace | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:18 | s.replace | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | exceptional return of s.repla ... "\\\\\\"") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | exceptional return of s.repla ... "\\\\\\"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | exceptional return of s.repla ... "\\\\\\"") | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | exceptional return of s.repla ... "\\\\\\"") | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | exceptional return of s.repla ... "\\\\\\"") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | s.repla ... "\\\\\\"") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | s.repla ... "\\\\\\"") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | s.repla ... "\\\\\\"") | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | s.repla ... "\\\\\\"") | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:10:37:32 | s.repla ... "\\\\\\"") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:12:37:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:12:37:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:12:37:18 | replace | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:12:37:18 | replace | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:12:37:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:20:37:23 | /"/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | enclosingFunctionBody | s s replace /"/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | enclosingFunctionName | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:37:26:37:31 | "\\\\\\"" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:40:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:40:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:40:0 | this | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:40:0 | this | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:40:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | 'arguments' object of function bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | 'arguments' object of function bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | 'arguments' object of function bad10 | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | 'arguments' object of function bad10 | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | 'arguments' object of function bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | exceptional return of function bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | exceptional return of function bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | exceptional return of function bad10 | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | exceptional return of function bad10 | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | exceptional return of function bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | return of function bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | return of function bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | return of function bad10 | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | return of function bad10 | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:1:42:1 | return of function bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:10:40:14 | bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:40:16:40:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:10 | s | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:10 | s | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:18 | s.replace | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:18 | s.replace | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | exceptional return of s.repla ...  "%2F") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | exceptional return of s.repla ...  "%2F") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | exceptional return of s.repla ...  "%2F") | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | exceptional return of s.repla ...  "%2F") | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | exceptional return of s.repla ...  "%2F") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | s.repla ...  "%2F") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | s.repla ...  "%2F") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | s.repla ...  "%2F") | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | s.repla ...  "%2F") | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:10:41:30 | s.repla ...  "%2F") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:12:41:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:12:41:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:12:41:18 | replace | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:12:41:18 | replace | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:12:41:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:20:41:22 | "/" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | enclosingFunctionBody | s s replace / %2F |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | enclosingFunctionName | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:41:25:41:29 | "%2F" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:44:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:44:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:44:0 | this | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:44:0 | this | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:44:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | 'arguments' object of function bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | 'arguments' object of function bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | 'arguments' object of function bad11 | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | 'arguments' object of function bad11 | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | 'arguments' object of function bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | exceptional return of function bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | exceptional return of function bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | exceptional return of function bad11 | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | exceptional return of function bad11 | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | exceptional return of function bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | return of function bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | return of function bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | return of function bad11 | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | return of function bad11 | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:1:46:1 | return of function bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:10:44:14 | bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:44:16:44:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:10 | s | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:10 | s | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:18 | s.replace | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:18 | s.replace | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | exceptional return of s.repla ... ", "%") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | exceptional return of s.repla ... ", "%") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | exceptional return of s.repla ... ", "%") | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | exceptional return of s.repla ... ", "%") | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | exceptional return of s.repla ... ", "%") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | s.repla ... ", "%") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | s.repla ... ", "%") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | s.repla ... ", "%") | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | s.repla ... ", "%") | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:10:45:30 | s.repla ... ", "%") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:12:45:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:12:45:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:12:45:18 | replace | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:12:45:18 | replace | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:12:45:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:20:45:24 | "%25" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | enclosingFunctionBody | s s replace %25 % |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | enclosingFunctionName | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:45:27:45:29 | "%" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:48:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:48:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:48:0 | this | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:48:0 | this | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:48:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | 'arguments' object of function bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | 'arguments' object of function bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | 'arguments' object of function bad12 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | 'arguments' object of function bad12 | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | 'arguments' object of function bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | exceptional return of function bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | exceptional return of function bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | exceptional return of function bad12 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | exceptional return of function bad12 | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | exceptional return of function bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | return of function bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | return of function bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | return of function bad12 | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | return of function bad12 | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:1:50:1 | return of function bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:10:48:14 | bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:48:16:48:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:10 | s | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:10 | s | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:18 | s.replace | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:18 | s.replace | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | exceptional return of s.replace(`'`, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | exceptional return of s.replace(`'`, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | exceptional return of s.replace(`'`, "") | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | exceptional return of s.replace(`'`, "") | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | exceptional return of s.replace(`'`, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | s.replace(`'`, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | s.replace(`'`, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | s.replace(`'`, "") | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | s.replace(`'`, "") | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:10:49:27 | s.replace(`'`, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:12:49:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:12:49:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:12:49:18 | replace | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:12:49:18 | replace | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:12:49:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:20:49:22 | `'` | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:21:49:21 | ' | stringConcatenatedWith |  -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | enclosingFunctionBody | s s replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | enclosingFunctionName | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:49:25:49:26 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:52:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:52:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:52:0 | this | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:52:0 | this | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:52:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | 'arguments' object of function bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | 'arguments' object of function bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | 'arguments' object of function bad13 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | 'arguments' object of function bad13 | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | 'arguments' object of function bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | exceptional return of function bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | exceptional return of function bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | exceptional return of function bad13 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | exceptional return of function bad13 | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | exceptional return of function bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | return of function bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | return of function bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | return of function bad13 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | return of function bad13 | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:1:54:1 | return of function bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:10:52:14 | bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:52:16:52:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:10 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:10 | s | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:18 | s.replace | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:18 | s.replace | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | exceptional return of s.replace("'", ``) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | exceptional return of s.replace("'", ``) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | exceptional return of s.replace("'", ``) | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | exceptional return of s.replace("'", ``) | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | exceptional return of s.replace("'", ``) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | s.replace("'", ``) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | s.replace("'", ``) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | s.replace("'", ``) | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | s.replace("'", ``) | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:10:53:27 | s.replace("'", ``) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:12:53:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:12:53:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:12:53:18 | replace | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:12:53:18 | replace | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:12:53:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:20:53:22 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | enclosingFunctionName | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:53:25:53:26 | `` | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:56:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:56:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:56:0 | this | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:56:0 | this | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:56:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | 'arguments' object of function bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | 'arguments' object of function bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | 'arguments' object of function bad14 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | 'arguments' object of function bad14 | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | 'arguments' object of function bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | exceptional return of function bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | exceptional return of function bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | exceptional return of function bad14 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | exceptional return of function bad14 | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | exceptional return of function bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | return of function bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | return of function bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | return of function bad14 | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | return of function bad14 | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:1:58:1 | return of function bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:10:56:14 | bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:56:16:56:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:10 | s | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:10 | s | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:18 | s.replace | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:18 | s.replace | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | exceptional return of s.replace(`'`, ``) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | exceptional return of s.replace(`'`, ``) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | exceptional return of s.replace(`'`, ``) | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | exceptional return of s.replace(`'`, ``) | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | exceptional return of s.replace(`'`, ``) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | s.replace(`'`, ``) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | s.replace(`'`, ``) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | s.replace(`'`, ``) | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | s.replace(`'`, ``) | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:10:57:27 | s.replace(`'`, ``) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:12:57:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:12:57:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:12:57:18 | replace | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:12:57:18 | replace | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:12:57:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:20:57:22 | `'` | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:21:57:21 | ' | stringConcatenatedWith |  -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | enclosingFunctionBody | s s replace ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | enclosingFunctionName | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:57:25:57:26 | `` | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:60:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:60:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:60:0 | this | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:60:0 | this | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:60:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | 'arguments' object of function bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | 'arguments' object of function bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | 'arguments' object of function bad15 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | 'arguments' object of function bad15 | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | 'arguments' object of function bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | exceptional return of function bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | exceptional return of function bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | exceptional return of function bad15 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | exceptional return of function bad15 | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | exceptional return of function bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | return of function bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | return of function bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | return of function bad15 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | return of function bad15 | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:1:62:1 | return of function bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:10:60:14 | bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:60:16:60:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:10 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:10 | s | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:18 | s.replace | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:18 | s.replace | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | exceptional return of s.repla ... "", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | exceptional return of s.repla ... "", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | exceptional return of s.repla ... "", "") | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | exceptional return of s.repla ... "", "") | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | exceptional return of s.repla ... "", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | s.repla ... "", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | s.repla ... "", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | s.repla ... "", "") | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | s.repla ... "", "") | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:10:61:32 | s.repla ... "", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:12:61:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:12:61:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:12:61:18 | replace | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:12:61:18 | replace | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:12:61:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:22 | "'" | stringConcatenatedWith |  -endpoint- '' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:20:61:27 | "'" + "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:26:61:27 | "" | stringConcatenatedWith | ''' -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | enclosingFunctionName | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:61:30:61:31 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:64:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:64:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:64:0 | this | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:64:0 | this | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:64:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | 'arguments' object of function bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | 'arguments' object of function bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | 'arguments' object of function bad16 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | 'arguments' object of function bad16 | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | 'arguments' object of function bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | exceptional return of function bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | exceptional return of function bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | exceptional return of function bad16 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | exceptional return of function bad16 | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | exceptional return of function bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | return of function bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | return of function bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | return of function bad16 | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | return of function bad16 | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:1:66:1 | return of function bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:10:64:14 | bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:64:16:64:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:10 | s | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:10 | s | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:18 | s.replace | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:18 | s.replace | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | exceptional return of s.repla ... " + "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | exceptional return of s.repla ... " + "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | exceptional return of s.repla ... " + "") | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | exceptional return of s.repla ... " + "") | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | exceptional return of s.repla ... " + "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | s.repla ... " + "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | s.repla ... " + "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | s.repla ... " + "") | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | s.repla ... " + "") | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:10:65:32 | s.repla ... " + "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:12:65:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:12:65:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:12:65:18 | replace | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:12:65:18 | replace | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:12:65:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:20:65:22 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:26 | "" | stringConcatenatedWith |  -endpoint- '' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:25:65:31 | "" + "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | enclosingFunctionBody | s s replace '   |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | enclosingFunctionName | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:65:30:65:31 | "" | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:68:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:68:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:68:0 | this | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:68:0 | this | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:68:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | 'arguments' object of function bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | 'arguments' object of function bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | 'arguments' object of function bad17 | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | 'arguments' object of function bad17 | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | 'arguments' object of function bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | exceptional return of function bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | exceptional return of function bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | exceptional return of function bad17 | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | exceptional return of function bad17 | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | exceptional return of function bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | return of function bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | return of function bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | return of function bad17 | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | return of function bad17 | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:1:70:1 | return of function bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:10:68:14 | bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:68:16:68:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:10 | s | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:10 | s | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:18 | s.replace | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:18 | s.replace | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | exceptional return of s.repla ... " + "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | exceptional return of s.repla ... " + "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | exceptional return of s.repla ... " + "") | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | exceptional return of s.repla ... " + "") | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | exceptional return of s.repla ... " + "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | s.repla ... " + "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | s.repla ... " + "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | s.repla ... " + "") | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | s.repla ... " + "") | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:10:69:37 | s.repla ... " + "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:12:69:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:12:69:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:12:69:18 | replace | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:12:69:18 | replace | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:12:69:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:22 | "'" | stringConcatenatedWith |  -endpoint- '' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:20:69:27 | "'" + "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:26:69:27 | "" | stringConcatenatedWith | ''' -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:31 | "" | stringConcatenatedWith |  -endpoint- '' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:30:69:36 | "" + "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | enclosingFunctionBody | s s replace '    |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | enclosingFunctionName | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:69:35:69:36 | "" | stringConcatenatedWith | '' -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:72:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:72:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:72:0 | this | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:72:0 | this | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:72:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | 'arguments' object of function good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | 'arguments' object of function good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | 'arguments' object of function good1 | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | 'arguments' object of function good1 | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | 'arguments' object of function good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | exceptional return of function good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | exceptional return of function good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | exceptional return of function good1 | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | exceptional return of function good1 | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | exceptional return of function good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | functio ... rn s;\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | functio ... rn s;\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | return of function good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | return of function good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | return of function good1 | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | return of function good1 | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:1:76:1 | return of function good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:10:72:14 | good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:72:16:72:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | exceptional return of s.indexOf("'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | exceptional return of s.indexOf("'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | exceptional return of s.indexOf("'") | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | exceptional return of s.indexOf("'") | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | exceptional return of s.indexOf("'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | s.indexOf("'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | s.indexOf("'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | s.indexOf("'") | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | s.indexOf("'") | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:23 | s.indexOf("'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:27 | s.indexOf("'") > 0 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:27 | s.indexOf("'") > 0 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:27 | s.indexOf("'") > 0 | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:27 | s.indexOf("'") > 0 | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:10:73:27 | s.indexOf("'") > 0 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:12:73:18 | indexOf | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:12:73:18 | indexOf | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:12:73:18 | indexOf | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:12:73:18 | indexOf | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:12:73:18 | indexOf | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | CalleeFlexibleAccessPath | s.indexOf |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:20:73:22 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:27:73:27 | 0 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:27:73:27 | 0 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:27:73:27 | 0 | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:27:73:27 | 0 | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:73:27:73:27 | 0 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:5 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:5 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:5 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:5 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:5 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s = s.r ... '", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s = s.r ... '", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s = s.r ... '", "") | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s = s.r ... '", "") | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:5:74:26 | s = s.r ... '", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:9 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:9 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:9 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:17 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:17 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:17 | s.replace | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:17 | s.replace | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:17 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | exceptional return of s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | exceptional return of s.replace("'", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | exceptional return of s.replace("'", "") | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | exceptional return of s.replace("'", "") | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | exceptional return of s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | s.replace("'", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | s.replace("'", "") | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | s.replace("'", "") | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:9:74:26 | s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:11:74:17 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:11:74:17 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:11:74:17 | replace | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:11:74:17 | replace | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:11:74:17 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:19:74:21 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:74:24:74:25 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:75:10:75:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:75:10:75:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:75:10:75:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace '  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:75:10:75:10 | s | enclosingFunctionName | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:75:10:75:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:78:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:78:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:78:0 | this | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:78:0 | this | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:78:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | 'arguments' object of function good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | 'arguments' object of function good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | 'arguments' object of function good2 | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | 'arguments' object of function good2 | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | 'arguments' object of function good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | exceptional return of function good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | exceptional return of function good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | exceptional return of function good2 | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | exceptional return of function good2 | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | exceptional return of function good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | functio ... rn s;\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | functio ... rn s;\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | functio ... rn s;\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | return of function good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | return of function good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | return of function good2 | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | return of function good2 | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:1:82:1 | return of function good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:10:78:14 | good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:78:16:78:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | exceptional return of s.indexOf("'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | exceptional return of s.indexOf("'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | exceptional return of s.indexOf("'") | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | exceptional return of s.indexOf("'") | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | exceptional return of s.indexOf("'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | s.indexOf("'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | s.indexOf("'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | s.indexOf("'") | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | s.indexOf("'") | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:23 | s.indexOf("'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:27 | s.indexOf("'") > 0 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:27 | s.indexOf("'") > 0 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:27 | s.indexOf("'") > 0 | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:27 | s.indexOf("'") > 0 | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:10:79:27 | s.indexOf("'") > 0 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:12:79:18 | indexOf | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:12:79:18 | indexOf | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:12:79:18 | indexOf | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:12:79:18 | indexOf | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:12:79:18 | indexOf | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | CalleeFlexibleAccessPath | s.indexOf |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:20:79:22 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:27:79:27 | 0 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:27:79:27 | 0 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:27:79:27 | 0 | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:27:79:27 | 0 | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:79:27:79:27 | 0 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:5 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:5 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:5 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:5 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:5 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s = s.r ... '/, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s = s.r ... '/, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s = s.r ... '/, "") | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s = s.r ... '/, "") | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:5:80:26 | s = s.r ... '/, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:9 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:9 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:9 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:17 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:17 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:17 | s.replace | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:17 | s.replace | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:17 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | exceptional return of s.replace(/'/, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | exceptional return of s.replace(/'/, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | exceptional return of s.replace(/'/, "") | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | exceptional return of s.replace(/'/, "") | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | exceptional return of s.replace(/'/, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | s.replace(/'/, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | s.replace(/'/, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | s.replace(/'/, "") | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | s.replace(/'/, "") | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:9:80:26 | s.replace(/'/, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:11:80:17 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:11:80:17 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:11:80:17 | replace | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:11:80:17 | replace | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:11:80:17 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:19:80:21 | /'/ | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:80:24:80:25 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:81:10:81:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:81:10:81:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:81:10:81:10 | s | enclosingFunctionBody | s s indexOf ' 0 s s replace /'/  s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:81:10:81:10 | s | enclosingFunctionName | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:81:10:81:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:84:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:84:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:84:0 | this | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:84:0 | this | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:84:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | 'arguments' object of function good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | 'arguments' object of function good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | 'arguments' object of function good3 | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | 'arguments' object of function good3 | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | 'arguments' object of function good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | exceptional return of function good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | exceptional return of function good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | exceptional return of function good3 | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | exceptional return of function good3 | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | exceptional return of function good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | return of function good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | return of function good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | return of function good3 | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | return of function good3 | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:1:86:1 | return of function good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:10:84:14 | good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:84:16:84:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:10 | s | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:10 | s | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:18 | s.replace | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:18 | s.replace | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | exceptional return of s.repla ... id10t") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | exceptional return of s.repla ... id10t") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | exceptional return of s.repla ... id10t") | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | exceptional return of s.repla ... id10t") | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | exceptional return of s.repla ... id10t") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | s.repla ... id10t") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | s.repla ... id10t") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | s.repla ... id10t") | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | s.repla ... id10t") | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:10:85:36 | s.repla ... id10t") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:12:85:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:12:85:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:12:85:18 | replace | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:12:85:18 | replace | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:12:85:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:20:85:26 | "@user" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | enclosingFunctionBody | s s replace @user id10t |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | enclosingFunctionName | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:85:29:85:35 | "id10t" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:88:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:88:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:88:0 | this | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:88:0 | this | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:88:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | 'arguments' object of function good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | 'arguments' object of function good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | 'arguments' object of function good4 | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | 'arguments' object of function good4 | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | 'arguments' object of function good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | exceptional return of function good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | exceptional return of function good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | exceptional return of function good4 | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | exceptional return of function good4 | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | exceptional return of function good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | return of function good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | return of function good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | return of function good4 | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | return of function good4 | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:1:90:1 | return of function good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:10:88:14 | good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:88:16:88:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:10 | s | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:10 | s | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:18 | s.replace | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:18 | s.replace | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | exceptional return of s.repla ... "\\\\d+") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | exceptional return of s.repla ... "\\\\d+") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | exceptional return of s.repla ... "\\\\d+") | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | exceptional return of s.repla ... "\\\\d+") | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | exceptional return of s.repla ... "\\\\d+") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | s.repla ... "\\\\d+") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | s.repla ... "\\\\d+") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | s.repla ... "\\\\d+") | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | s.repla ... "\\\\d+") | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:10:89:32 | s.repla ... "\\\\d+") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:12:89:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:12:89:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:12:89:18 | replace | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:12:89:18 | replace | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:12:89:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:20:89:23 | /#/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | enclosingFunctionBody | s s replace /#/g \\d+ |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | enclosingFunctionName | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:89:26:89:31 | "\\\\d+" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:92:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:92:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:92:0 | this | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:92:0 | this | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:92:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | 'arguments' object of function good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | 'arguments' object of function good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | 'arguments' object of function good5 | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | 'arguments' object of function good5 | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | 'arguments' object of function good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | exceptional return of function good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | exceptional return of function good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | exceptional return of function good5 | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | exceptional return of function good5 | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | exceptional return of function good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | return of function good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | return of function good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | return of function good5 | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | return of function good5 | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:1:94:1 | return of function good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:10:92:14 | good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:92:16:92:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:10 | s | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:10 | s | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:18 | s.replace | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:18 | s.replace | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | exceptional return of s.repla ... "\\\\\\\\") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | exceptional return of s.repla ... "\\\\\\\\") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | exceptional return of s.repla ... "\\\\\\\\") | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | exceptional return of s.repla ... "\\\\\\\\") | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | exceptional return of s.repla ... "\\\\\\\\") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | s.repla ... "\\\\\\\\") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | s.repla ... "\\\\\\\\") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | s.repla ... "\\\\\\\\") | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | s.repla ... "\\\\\\\\") | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:33 | s.repla ... "\\\\\\\\") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:41 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:41 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:41 | s.repla ... replace | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:41 | s.repla ... replace | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:41 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | exceptional return of s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | exceptional return of s.repla ... "\\\\$&") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | exceptional return of s.repla ... "\\\\$&") | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | exceptional return of s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | s.repla ... "\\\\$&") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | s.repla ... "\\\\$&") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | s.repla ... "\\\\$&") | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | s.repla ... "\\\\$&") | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:10:93:58 | s.repla ... "\\\\$&") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:12:93:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:12:93:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:12:93:18 | replace | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:12:93:18 | replace | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:12:93:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:20:93:24 | /\\\\/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:27:93:32 | "\\\\\\\\" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:35:93:41 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:35:93:41 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:35:93:41 | replace | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:35:93:41 | replace | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:35:93:41 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:43:93:49 | /['"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | enclosingFunctionBody | s s replace /\\\\/g \\\\ replace /['"]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | enclosingFunctionName | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:93:52:93:57 | "\\\\$&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:96:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:96:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:96:0 | this | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:96:0 | this | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:96:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | 'arguments' object of function good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | 'arguments' object of function good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | 'arguments' object of function good6 | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | 'arguments' object of function good6 | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | 'arguments' object of function good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | exceptional return of function good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | exceptional return of function good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | exceptional return of function good6 | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | exceptional return of function good6 | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | exceptional return of function good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | return of function good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | return of function good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | return of function good6 | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | return of function good6 | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:1:98:1 | return of function good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:10:96:14 | good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:96:16:96:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:10 | s | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:10 | s | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:18 | s.replace | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:18 | s.replace | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | exceptional return of s.repla ... '\\\\\\\\') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | exceptional return of s.repla ... '\\\\\\\\') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | exceptional return of s.repla ... '\\\\\\\\') | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | exceptional return of s.repla ... '\\\\\\\\') | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | exceptional return of s.repla ... '\\\\\\\\') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | s.repla ... '\\\\\\\\') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | s.repla ... '\\\\\\\\') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | s.repla ... '\\\\\\\\') | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | s.repla ... '\\\\\\\\') | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:35 | s.repla ... '\\\\\\\\') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:43 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:43 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:43 | s.repla ... replace | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:43 | s.repla ... replace | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:43 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | exceptional return of s.repla ...  '\\\\"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | exceptional return of s.repla ...  '\\\\"') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | exceptional return of s.repla ...  '\\\\"') | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | exceptional return of s.repla ...  '\\\\"') | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | exceptional return of s.repla ...  '\\\\"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | s.repla ...  '\\\\"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | s.repla ...  '\\\\"') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | s.repla ...  '\\\\"') | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | s.repla ...  '\\\\"') | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:10:97:59 | s.repla ...  '\\\\"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:12:97:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:12:97:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:12:97:18 | replace | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:12:97:18 | replace | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:12:97:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:20:97:26 | /[\\\\]/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:29:97:34 | '\\\\\\\\' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:37:97:43 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:37:97:43 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:37:97:43 | replace | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:37:97:43 | replace | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:37:97:43 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:45:97:51 | /[\\"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | enclosingFunctionBody | s s replace /[\\\\]/g \\\\ replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | enclosingFunctionName | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:97:54:97:58 | '\\\\"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:100:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:100:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:100:0 | this | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:100:0 | this | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:100:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | 'arguments' object of function good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | 'arguments' object of function good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | 'arguments' object of function good7 | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | 'arguments' object of function good7 | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | 'arguments' object of function good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | exceptional return of function good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | exceptional return of function good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | exceptional return of function good7 | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | exceptional return of function good7 | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | exceptional return of function good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | return of function good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | return of function good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | return of function good7 | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | return of function good7 | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:1:103:1 | return of function good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:10:100:14 | good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:100:16:100:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:3 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:3 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:3 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:3 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s = s.r ... '\\\\\\\\') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s = s.r ... '\\\\\\\\') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s = s.r ... '\\\\\\\\') | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s = s.r ... '\\\\\\\\') | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:3:101:32 | s = s.r ... '\\\\\\\\') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:7 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:7 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:7 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:7 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:15 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:15 | s.replace | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:15 | s.replace | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:15 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | exceptional return of s.repla ... '\\\\\\\\') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | exceptional return of s.repla ... '\\\\\\\\') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | exceptional return of s.repla ... '\\\\\\\\') | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | exceptional return of s.repla ... '\\\\\\\\') | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | exceptional return of s.repla ... '\\\\\\\\') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | s.repla ... '\\\\\\\\') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | s.repla ... '\\\\\\\\') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | s.repla ... '\\\\\\\\') | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | s.repla ... '\\\\\\\\') | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:7:101:32 | s.repla ... '\\\\\\\\') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:9:101:15 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:9:101:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:9:101:15 | replace | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:9:101:15 | replace | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:9:101:15 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:17:101:23 | /[\\\\]/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:101:26:101:31 | '\\\\\\\\' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:10 | s | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:10 | s | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:18 | s.replace | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:18 | s.replace | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | exceptional return of s.repla ...  '\\\\"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | exceptional return of s.repla ...  '\\\\"') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | exceptional return of s.repla ...  '\\\\"') | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | exceptional return of s.repla ...  '\\\\"') | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | exceptional return of s.repla ...  '\\\\"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | s.repla ...  '\\\\"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | s.repla ...  '\\\\"') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | s.repla ...  '\\\\"') | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | s.repla ...  '\\\\"') | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:10:102:34 | s.repla ...  '\\\\"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:12:102:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:12:102:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:12:102:18 | replace | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:12:102:18 | replace | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:12:102:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:20:102:26 | /[\\"]/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | enclosingFunctionBody | s s s replace /[\\\\]/g \\\\ s replace /[\\"]/g \\" |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | enclosingFunctionName | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:102:29:102:33 | '\\\\"' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:105:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:105:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:105:0 | this | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:105:0 | this | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:105:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | 'arguments' object of function good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | 'arguments' object of function good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | 'arguments' object of function good8 | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | 'arguments' object of function good8 | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | 'arguments' object of function good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | exceptional return of function good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | exceptional return of function good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | exceptional return of function good8 | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | exceptional return of function good8 | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | exceptional return of function good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | return of function good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | return of function good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | return of function good8 | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | return of function good8 | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:1:107:1 | return of function good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:10:105:14 | good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:105:16:105:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:10 | s | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:10 | s | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:18 | s.replace | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:18 | s.replace | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | exceptional return of s.repla ... '\\\\$&') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | exceptional return of s.repla ... '\\\\$&') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | exceptional return of s.repla ... '\\\\$&') | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | exceptional return of s.repla ... '\\\\$&') | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | exceptional return of s.repla ... '\\\\$&') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | s.repla ... '\\\\$&') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | s.repla ... '\\\\$&') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | s.repla ... '\\\\$&') | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | s.repla ... '\\\\$&') | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:10:106:33 | s.repla ... '\\\\$&') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:12:106:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:12:106:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:12:106:18 | replace | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:12:106:18 | replace | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:12:106:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:20:106:24 | /\\W/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | enclosingFunctionBody | s s replace /\\W/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | enclosingFunctionName | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:106:27:106:32 | '\\\\$&' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:109:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:109:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:109:0 | this | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:109:0 | this | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:109:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | 'arguments' object of function good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | 'arguments' object of function good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | 'arguments' object of function good9 | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | 'arguments' object of function good9 | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | 'arguments' object of function good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | exceptional return of function good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | exceptional return of function good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | exceptional return of function good9 | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | exceptional return of function good9 | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | exceptional return of function good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | return of function good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | return of function good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | return of function good9 | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | return of function good9 | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:1:111:1 | return of function good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:10:109:14 | good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:109:16:109:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:10 | s | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:10 | s | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:18 | s.replace | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:18 | s.replace | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | exceptional return of s.repla ... '\\\\$&') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | exceptional return of s.repla ... '\\\\$&') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | exceptional return of s.repla ... '\\\\$&') | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | exceptional return of s.repla ... '\\\\$&') | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | exceptional return of s.repla ... '\\\\$&') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | s.repla ... '\\\\$&') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | s.repla ... '\\\\$&') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | s.repla ... '\\\\$&') | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | s.repla ... '\\\\$&') | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:10:110:38 | s.repla ... '\\\\$&') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:12:110:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:12:110:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:12:110:18 | replace | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:12:110:18 | replace | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:12:110:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:20:110:29 | /[^\\w\\s]/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | enclosingFunctionBody | s s replace /[^\\w\\s]/g \\$& |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | enclosingFunctionName | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:110:32:110:37 | '\\\\$&' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:113:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:113:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:113:0 | this | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:113:0 | this | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:113:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | 'arguments' object of function good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | 'arguments' object of function good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | 'arguments' object of function good10 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | 'arguments' object of function good10 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | 'arguments' object of function good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | exceptional return of function good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | exceptional return of function good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | exceptional return of function good10 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | exceptional return of function good10 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | exceptional return of function good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | functio ...  "'";\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | functio ...  "'";\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | functio ...  "'";\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | return of function good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | return of function good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | return of function good10 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | return of function good10 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:1:119:1 | return of function good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:10:113:15 | good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:113:17:113:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:3 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:3 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:3 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:3 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s = JSO ... gify(s) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s = JSO ... gify(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s = JSO ... gify(s) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s = JSO ... gify(s) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:3:114:23 | s = JSO ... gify(s) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:10 | JSON | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:10 | JSON | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:10 | JSON | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:10 | JSON | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:10 | JSON | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:20 | JSON.stringify | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:20 | JSON.stringify | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:20 | JSON.stringify | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:20 | JSON.stringify | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:20 | JSON.stringify | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | JSON.stringify(s) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | JSON.stringify(s) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | JSON.stringify(s) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | JSON.stringify(s) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | JSON.stringify(s) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | exceptional return of JSON.stringify(s) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | exceptional return of JSON.stringify(s) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | exceptional return of JSON.stringify(s) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | exceptional return of JSON.stringify(s) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:7:114:23 | exceptional return of JSON.stringify(s) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:12:114:20 | stringify | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:12:114:20 | stringify | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:12:114:20 | stringify | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:12:114:20 | stringify | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:12:114:20 | stringify | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | CalleeFlexibleAccessPath | JSON.stringify |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:114:22:114:22 | s | receiverName | JSON |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:3 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:3 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:3 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:3 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s = s.slice(1, -1) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s = s.slice(1, -1) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s = s.slice(1, -1) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s = s.slice(1, -1) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:3:115:20 | s = s.slice(1, -1) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:7 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:7 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:7 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:7 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:13 | s.slice | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:13 | s.slice | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:13 | s.slice | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:13 | s.slice | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:13 | s.slice | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | exceptional return of s.slice(1, -1) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | exceptional return of s.slice(1, -1) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | exceptional return of s.slice(1, -1) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | exceptional return of s.slice(1, -1) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | exceptional return of s.slice(1, -1) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | s.slice(1, -1) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | s.slice(1, -1) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | s.slice(1, -1) | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | s.slice(1, -1) | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:7:115:20 | s.slice(1, -1) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:9:115:13 | slice | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:9:115:13 | slice | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:9:115:13 | slice | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:9:115:13 | slice | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:9:115:13 | slice | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | CalleeFlexibleAccessPath | s.slice |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:15:115:15 | 1 | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | CalleeFlexibleAccessPath | s.slice |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:18:115:19 | -1 | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:19:115:19 | 1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:19:115:19 | 1 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:19:115:19 | 1 | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:19:115:19 | 1 | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:115:19:115:19 | 1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:3 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:3 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:3 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:3 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s = s.r ... g, '"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s = s.r ... g, '"') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s = s.r ... g, '"') | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s = s.r ... g, '"') | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:3:116:28 | s = s.r ... g, '"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:7 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:7 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:7 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:7 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:15 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:15 | s.replace | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:15 | s.replace | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:15 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | exceptional return of s.repla ... g, '"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | exceptional return of s.repla ... g, '"') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | exceptional return of s.repla ... g, '"') | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | exceptional return of s.repla ... g, '"') | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | exceptional return of s.repla ... g, '"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | s.repla ... g, '"') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | s.repla ... g, '"') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | s.repla ... g, '"') | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | s.repla ... g, '"') | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:7:116:28 | s.repla ... g, '"') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:9:116:15 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:9:116:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:9:116:15 | replace | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:9:116:15 | replace | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:9:116:15 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:17:116:22 | /\\\\"/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:116:25:116:27 | '"' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:3 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:3 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:3 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:3 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:3 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s = s.r ...  "\\\\'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s = s.r ...  "\\\\'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s = s.r ...  "\\\\'") | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s = s.r ...  "\\\\'") | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:3:117:28 | s = s.r ...  "\\\\'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:7 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:7 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:7 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:7 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:7 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:15 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:15 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:15 | s.replace | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:15 | s.replace | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:15 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | exceptional return of s.repla ...  "\\\\'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | exceptional return of s.repla ...  "\\\\'") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | exceptional return of s.repla ...  "\\\\'") | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | exceptional return of s.repla ...  "\\\\'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | s.repla ...  "\\\\'") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | s.repla ...  "\\\\'") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | s.repla ...  "\\\\'") | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | s.repla ...  "\\\\'") | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:7:117:28 | s.repla ...  "\\\\'") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:9:117:15 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:9:117:15 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:9:117:15 | replace | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:9:117:15 | replace | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:9:117:15 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:17:117:20 | /'/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:117:23:117:27 | "\\\\'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:12 | "'" | stringConcatenatedWith |  -endpoint- s + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:16 | "'" + s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:16 | "'" + s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:16 | "'" + s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:16 | "'" + s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:16 | "'" + s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:22 | "'" + s + "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:22 | "'" + s + "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:22 | "'" + s + "'" | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:22 | "'" + s + "'" | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:10:118:22 | "'" + s + "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:16:118:16 | s | stringConcatenatedWith | ''' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | enclosingFunctionBody | s s JSON stringify s s s slice 1 1 s s replace /\\\\"/g " s s replace /'/g \\' ' s ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | enclosingFunctionName | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:118:20:118:22 | "'" | stringConcatenatedWith | ''' + s -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:121:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:121:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:121:0 | this | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:121:0 | this | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:121:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | 'arguments' object of function flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | 'arguments' object of function flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | 'arguments' object of function flowifyComments | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | 'arguments' object of function flowifyComments | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | 'arguments' object of function flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | exceptional return of function flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | exceptional return of function flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | exceptional return of function flowifyComments | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | exceptional return of function flowifyComments | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | exceptional return of function flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | return of function flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | return of function flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | return of function flowifyComments | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | return of function flowifyComments | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:1:123:1 | return of function flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:10:121:24 | flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:121:26:121:26 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:10 | s | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:10 | s | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:18 | s.replace | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:18 | s.replace | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | exceptional return of s.repla ... , '\\u1f4a9\\udca9') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | exceptional return of s.repla ... , '\\u1f4a9\\udca9') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | exceptional return of s.repla ... , '\\u1f4a9\\udca9') | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | exceptional return of s.repla ... , '\\u1f4a9\\udca9') | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | exceptional return of s.repla ... , '\\u1f4a9\\udca9') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | s.repla ... , '\\u1f4a9\\udca9') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | s.repla ... , '\\u1f4a9\\udca9') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | s.repla ... , '\\u1f4a9\\udca9') | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | s.repla ... , '\\u1f4a9\\udca9') | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:10:122:30 | s.repla ... , '\\u1f4a9\\udca9') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:12:122:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:12:122:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:12:122:18 | replace | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:12:122:18 | replace | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:12:122:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:20:122:23 | /#/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | enclosingFunctionBody | s s replace /#/g \ud83d\udca9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | enclosingFunctionName | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:122:26:122:29 | '\\u1f4a9\\udca9' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:125:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:125:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:125:0 | this | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:125:0 | this | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:125:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | 'arguments' object of function good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | 'arguments' object of function good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | 'arguments' object of function good11 | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | 'arguments' object of function good11 | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | 'arguments' object of function good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | exceptional return of function good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | exceptional return of function good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | exceptional return of function good11 | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | exceptional return of function good11 | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | exceptional return of function good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | functio ... 42");\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | functio ... 42");\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | functio ... 42");\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | return of function good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | return of function good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | return of function good11 | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | return of function good11 | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:1:127:1 | return of function good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:10:125:15 | good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:125:17:125:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:10 | s | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:10 | s | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:18 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:18 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:18 | s.replace | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:18 | s.replace | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:18 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | exceptional return of s.repla ... , "42") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | exceptional return of s.repla ... , "42") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | exceptional return of s.repla ... , "42") | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | exceptional return of s.repla ... , "42") | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | exceptional return of s.repla ... , "42") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | s.repla ... , "42") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | s.repla ... , "42") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | s.repla ... , "42") | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | s.repla ... , "42") | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:10:126:30 | s.repla ... , "42") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:12:126:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:12:126:18 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:12:126:18 | replace | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:12:126:18 | replace | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:12:126:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:20:126:23 | "%d" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | enclosingFunctionBody | s s replace %d 42 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | enclosingFunctionName | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:126:26:126:29 | "42" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:129:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:129:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:129:0 | this | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:129:0 | this | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:129:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | 'arguments' object of function good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | 'arguments' object of function good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | 'arguments' object of function good12 | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | 'arguments' object of function good12 | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | 'arguments' object of function good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | exceptional return of function good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | exceptional return of function good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | exceptional return of function good12 | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | exceptional return of function good12 | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | exceptional return of function good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | functio ... agged\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | functio ... agged\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | functio ... agged\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | return of function good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | return of function good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | return of function good12 | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | return of function good12 | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:1:142:1 | return of function good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:10:129:15 | good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:129:17:129:17 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | exceptional return of s.replace('[', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | exceptional return of s.replace('[', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | exceptional return of s.replace('[', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | exceptional return of s.replace('[', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | exceptional return of s.replace('[', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | s.replace('[', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | s.replace('[', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | s.replace('[', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | s.replace('[', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:19 | s.replace('[', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | exceptional return of s.repla ... ]', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | exceptional return of s.repla ... ]', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | exceptional return of s.repla ... ]', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | exceptional return of s.repla ... ]', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | exceptional return of s.repla ... ]', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | s.repla ... ]', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | s.repla ... ]', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | s.repla ... ]', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | s.repla ... ]', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:2:130:36 | s.repla ... ]', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:4:130:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:4:130:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:4:130:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:4:130:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:4:130:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:12:130:14 | '[' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:17:130:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:21:130:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:21:130:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:21:130:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:21:130:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:21:130:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:29:130:31 | ']' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:130:34:130:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | exceptional return of s.replace('(', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | exceptional return of s.replace('(', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | exceptional return of s.replace('(', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | exceptional return of s.replace('(', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | exceptional return of s.replace('(', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | s.replace('(', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | s.replace('(', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | s.replace('(', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | s.replace('(', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:19 | s.replace('(', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | exceptional return of s.repla ... )', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | exceptional return of s.repla ... )', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | exceptional return of s.repla ... )', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | exceptional return of s.repla ... )', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | exceptional return of s.repla ... )', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | s.repla ... )', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | s.repla ... )', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | s.repla ... )', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | s.repla ... )', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:2:131:36 | s.repla ... )', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:4:131:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:4:131:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:4:131:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:4:131:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:4:131:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:12:131:14 | '(' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:17:131:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:21:131:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:21:131:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:21:131:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:21:131:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:21:131:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:29:131:31 | ')' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:131:34:131:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | exceptional return of s.replace('{', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | exceptional return of s.replace('{', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | exceptional return of s.replace('{', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | exceptional return of s.replace('{', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | exceptional return of s.replace('{', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | s.replace('{', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | s.replace('{', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | s.replace('{', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | s.replace('{', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:19 | s.replace('{', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | exceptional return of s.repla ... }', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | exceptional return of s.repla ... }', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | exceptional return of s.repla ... }', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | exceptional return of s.repla ... }', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | exceptional return of s.repla ... }', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | s.repla ... }', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | s.repla ... }', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | s.repla ... }', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | s.repla ... }', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:2:132:36 | s.repla ... }', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:4:132:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:4:132:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:4:132:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:4:132:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:4:132:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:12:132:14 | '{' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:17:132:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:21:132:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:21:132:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:21:132:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:21:132:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:21:132:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:29:132:31 | '}' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:132:34:132:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | exceptional return of s.replace('<', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | exceptional return of s.replace('<', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | exceptional return of s.replace('<', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | exceptional return of s.replace('<', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | exceptional return of s.replace('<', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | s.replace('<', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | s.replace('<', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | s.replace('<', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | s.replace('<', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:19 | s.replace('<', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | exceptional return of s.repla ... >', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | exceptional return of s.repla ... >', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | exceptional return of s.repla ... >', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | exceptional return of s.repla ... >', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | exceptional return of s.repla ... >', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | s.repla ... >', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | s.repla ... >', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | s.repla ... >', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | s.repla ... >', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:2:133:36 | s.repla ... >', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:4:133:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:4:133:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:4:133:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:4:133:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:4:133:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:12:133:14 | '<' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:17:133:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:21:133:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:21:133:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:21:133:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:21:133:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:21:133:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:29:133:31 | '>' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:133:34:133:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | exceptional return of s.repla ...  '\\\\[') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | exceptional return of s.repla ...  '\\\\[') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | exceptional return of s.repla ...  '\\\\[') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | exceptional return of s.repla ...  '\\\\[') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | exceptional return of s.repla ...  '\\\\[') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | s.repla ...  '\\\\[') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | s.repla ...  '\\\\[') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | s.repla ...  '\\\\[') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | s.repla ...  '\\\\[') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:22 | s.repla ...  '\\\\[') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:30 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:30 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:30 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:30 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:30 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | exceptional return of s.repla ...  '\\\\]') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | exceptional return of s.repla ...  '\\\\]') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | exceptional return of s.repla ...  '\\\\]') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | exceptional return of s.repla ...  '\\\\]') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | exceptional return of s.repla ...  '\\\\]') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | s.repla ...  '\\\\]') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | s.repla ...  '\\\\]') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | s.repla ...  '\\\\]') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | s.repla ...  '\\\\]') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:2:135:42 | s.repla ...  '\\\\]') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:4:135:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:4:135:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:4:135:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:4:135:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:4:135:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:12:135:14 | '[' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:17:135:21 | '\\\\[' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:24:135:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:24:135:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:24:135:30 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:24:135:30 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:24:135:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:32:135:34 | ']' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:135:37:135:41 | '\\\\]' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | exceptional return of s.repla ...  '\\\\{') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | exceptional return of s.repla ...  '\\\\{') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | exceptional return of s.repla ...  '\\\\{') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | exceptional return of s.repla ...  '\\\\{') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | exceptional return of s.repla ...  '\\\\{') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | s.repla ...  '\\\\{') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | s.repla ...  '\\\\{') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | s.repla ...  '\\\\{') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | s.repla ...  '\\\\{') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:22 | s.repla ...  '\\\\{') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:30 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:30 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:30 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:30 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:30 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | exceptional return of s.repla ...  '\\\\}') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | exceptional return of s.repla ...  '\\\\}') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | exceptional return of s.repla ...  '\\\\}') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | exceptional return of s.repla ...  '\\\\}') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | exceptional return of s.repla ...  '\\\\}') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | s.repla ...  '\\\\}') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | s.repla ...  '\\\\}') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | s.repla ...  '\\\\}') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | s.repla ...  '\\\\}') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:2:136:42 | s.repla ...  '\\\\}') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:4:136:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:4:136:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:4:136:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:4:136:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:4:136:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:12:136:14 | '{' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:17:136:21 | '\\\\{' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:24:136:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:24:136:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:24:136:30 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:24:136:30 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:24:136:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:32:136:34 | '}' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:136:37:136:41 | '\\\\}' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s = s.r ... [', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s = s.r ... [', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s = s.r ... [', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s = s.r ... [', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:2:138:23 | s = s.r ... [', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:6 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:6 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:6 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:6 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:6 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:14 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:14 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:14 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:14 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:14 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | exceptional return of s.replace('[', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | exceptional return of s.replace('[', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | exceptional return of s.replace('[', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | exceptional return of s.replace('[', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | exceptional return of s.replace('[', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | s.replace('[', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | s.replace('[', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | s.replace('[', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | s.replace('[', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:6:138:23 | s.replace('[', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:8:138:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:8:138:14 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:8:138:14 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:8:138:14 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:8:138:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:16:138:18 | '[' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:138:21:138:22 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s = s.r ... ]', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s = s.r ... ]', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s = s.r ... ]', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s = s.r ... ]', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:2:139:23 | s = s.r ... ]', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:6 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:6 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:6 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:6 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:6 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:14 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:14 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:14 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:14 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:14 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | exceptional return of s.replace(']', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | exceptional return of s.replace(']', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | exceptional return of s.replace(']', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | exceptional return of s.replace(']', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | exceptional return of s.replace(']', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | s.replace(']', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | s.replace(']', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | s.replace(']', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | s.replace(']', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:6:139:23 | s.replace(']', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:8:139:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:8:139:14 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:8:139:14 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:8:139:14 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:8:139:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:16:139:18 | ']' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:139:21:139:22 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | exceptional return of s.replace(/{/, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | exceptional return of s.replace(/{/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | exceptional return of s.replace(/{/, '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | exceptional return of s.replace(/{/, '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | exceptional return of s.replace(/{/, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | s.replace(/{/, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | s.replace(/{/, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | s.replace(/{/, '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | s.replace(/{/, '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:19 | s.replace(/{/, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | exceptional return of s.repla ... }/, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | exceptional return of s.repla ... }/, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | exceptional return of s.repla ... }/, '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | exceptional return of s.repla ... }/, '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | exceptional return of s.repla ... }/, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | s.repla ... }/, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | s.repla ... }/, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | s.repla ... }/, '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | s.repla ... }/, '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:2:140:36 | s.repla ... }/, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:4:140:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:4:140:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:4:140:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:4:140:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:4:140:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:12:140:14 | /{/ | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:17:140:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:21:140:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:21:140:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:21:140:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:21:140:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:21:140:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:29:140:31 | /}/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:140:34:140:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:2 | s | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:2 | s | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:10 | s.replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:10 | s.replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | exceptional return of s.replace(']', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | exceptional return of s.replace(']', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | exceptional return of s.replace(']', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | exceptional return of s.replace(']', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | exceptional return of s.replace(']', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | s.replace(']', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | s.replace(']', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | s.replace(']', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | s.replace(']', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:19 | s.replace(']', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:27 | s.repla ... replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:27 | s.repla ... replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | exceptional return of s.repla ... [', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | exceptional return of s.repla ... [', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | exceptional return of s.repla ... [', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | exceptional return of s.repla ... [', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | exceptional return of s.repla ... [', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | s.repla ... [', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | s.repla ... [', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | s.repla ... [', '') | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | s.repla ... [', '') | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:2:141:36 | s.repla ... [', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:4:141:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:4:141:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:4:141:10 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:4:141:10 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:4:141:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:12:141:14 | ']' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:17:141:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:21:141:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:21:141:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:21:141:27 | replace | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:21:141:27 | replace | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:21:141:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:29:141:31 | '[' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | enclosingFunctionBody | s s replace [  replace ]  s replace (  replace )  s replace {  replace }  s replace <  replace >  s replace [ \\[ replace ] \\] s replace { \\{ replace } \\} s s replace [  s s replace ]  s replace /{/  replace /}/  s replace ]  replace [  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | enclosingFunctionName | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:141:34:141:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | require | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | require | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | require | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | require | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | require | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | this | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | this | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:144:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | 'arguments' object of function newlines | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | 'arguments' object of function newlines | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | 'arguments' object of function newlines | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | 'arguments' object of function newlines | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | 'arguments' object of function newlines | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | exceptional return of function newlines | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | exceptional return of function newlines | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | exceptional return of function newlines | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | exceptional return of function newlines | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | exceptional return of function newlines | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | return of function newlines | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | return of function newlines | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | return of function newlines | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | return of function newlines | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:1:150:1 | return of function newlines | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:10:144:17 | newlines | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:10:144:17 | newlines | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:10:144:17 | newlines | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:19:144:19 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:19:144:19 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:19:144:19 | s | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:19:144:19 | s | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:144:19:144:19 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:8 | require | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:8 | require | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:8 | require | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:8 | require | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:8 | require | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | exceptional return of require ... ocess") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | exceptional return of require ... ocess") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | exceptional return of require ... ocess") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | exceptional return of require ... ocess") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | require ... ocess") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | require ... ocess") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | require ... ocess") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | require ... ocess") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:25 | require ... ocess") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:34 | require ... xecSync | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:34 | require ... xecSync | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:34 | require ... xecSync | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:34 | require ... xecSync | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:34 | require ... xecSync | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | exceptional return of require ... emacs") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | exceptional return of require ... emacs") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | exceptional return of require ... emacs") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | exceptional return of require ... emacs") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | exceptional return of require ... emacs") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | require ... emacs") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | require ... emacs") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | require ... emacs") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | require ... emacs") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:49 | require ... emacs") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:58 | require ... oString | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:58 | require ... oString | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:58 | require ... oString | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:58 | require ... oString | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:58 | require ... oString | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | exceptional return of require ... tring() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | exceptional return of require ... tring() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | exceptional return of require ... tring() | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | exceptional return of require ... tring() | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | exceptional return of require ... tring() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | require ... tring() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | require ... tring() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | require ... tring() | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | require ... tring() | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:60 | require ... tring() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:68 | require ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:68 | require ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:68 | require ... replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:68 | require ... replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:68 | require ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | exceptional return of require ... n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | exceptional return of require ... n", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | exceptional return of require ... n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | exceptional return of require ... n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | exceptional return of require ... n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | require ... n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | require ... n", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | require ... n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | require ... n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:2:146:78 | require ... n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | CalleeFlexibleAccessPath | require |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:10:146:24 | "child_process" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:27:146:34 | execSync | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:27:146:34 | execSync | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:27:146:34 | execSync | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:27:146:34 | execSync | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:27:146:34 | execSync | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | CalleeFlexibleAccessPath | import(!).execSync |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | calleeImports | child_process |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:36:146:48 | "which emacs" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:51:146:58 | toString | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:51:146:58 | toString | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:51:146:58 | toString | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:51:146:58 | toString | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:51:146:58 | toString | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:62:146:68 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:62:146:68 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:62:146:68 | replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:62:146:68 | replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:62:146:68 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | CalleeFlexibleAccessPath | import(!).execSync().toString().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | calleeImports | child_process |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:70:146:73 | "\\n" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | CalleeFlexibleAccessPath | import(!).execSync().toString().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | calleeImports | child_process |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:146:76:146:77 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:2 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:2 | x | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:2 | x | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:2 | x | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:2 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:10 | x.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:10 | x.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:10 | x.replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:10 | x.replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:10 | x.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | exceptional return of x.replace("\\n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | exceptional return of x.replace("\\n", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | exceptional return of x.replace("\\n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | exceptional return of x.replace("\\n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | exceptional return of x.replace("\\n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | x.replace("\\n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | x.replace("\\n", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | x.replace("\\n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | x.replace("\\n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:20 | x.replace("\\n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:28 | x.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:28 | x.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:28 | x.repla ... replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:28 | x.repla ... replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:28 | x.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | exceptional return of x.repla ... e(x, y) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | exceptional return of x.repla ... e(x, y) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | exceptional return of x.repla ... e(x, y) | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | exceptional return of x.repla ... e(x, y) | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | exceptional return of x.repla ... e(x, y) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | x.repla ... e(x, y) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | x.repla ... e(x, y) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | x.repla ... e(x, y) | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | x.repla ... e(x, y) | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:2:148:34 | x.repla ... e(x, y) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:4:148:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:4:148:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:4:148:10 | replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:4:148:10 | replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:4:148:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:12:148:15 | "\\n" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:18:148:19 | "" | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:22:148:28 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:22:148:28 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:22:148:28 | replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:22:148:28 | replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:22:148:28 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:30:148:30 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:148:33:148:33 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:2 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:2 | x | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:2 | x | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:2 | x | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:2 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:10 | x.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:10 | x.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:10 | x.replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:10 | x.replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:10 | x.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | exceptional return of x.replace(x, y) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | exceptional return of x.replace(x, y) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | exceptional return of x.replace(x, y) | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | exceptional return of x.replace(x, y) | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | exceptional return of x.replace(x, y) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | x.replace(x, y) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | x.replace(x, y) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | x.replace(x, y) | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | x.replace(x, y) | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:16 | x.replace(x, y) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:24 | x.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:24 | x.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:24 | x.repla ... replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:24 | x.repla ... replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:24 | x.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | exceptional return of x.repla ... n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | exceptional return of x.repla ... n", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | exceptional return of x.repla ... n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | exceptional return of x.repla ... n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | exceptional return of x.repla ... n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | x.repla ... n", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | x.repla ... n", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | x.repla ... n", "") | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | x.repla ... n", "") | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:2:149:34 | x.repla ... n", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:4:149:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:4:149:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:4:149:10 | replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:4:149:10 | replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:4:149:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:12:149:12 | x | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:15:149:15 | y | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:18:149:24 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:18:149:24 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:18:149:24 | replace | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:18:149:24 | replace | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:18:149:24 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:26:149:29 | "\\n" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | enclosingFunctionBody | s require child_process execSync which emacs toString replace \n  x replace \n  replace x y x replace x y replace \n  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | enclosingFunctionName | newlines |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:149:32:149:33 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:3 | app | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:3 | app | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:3 | app | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:7 | app.get | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:7 | app.get | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:152:7 | app.get | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | app.get ... ed);\\n}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | app.get ... ed);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | app.get ... ed);\\n}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | exceptional return of app.get ... ed);\\n}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | exceptional return of app.get ... ed);\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:1:189:2 | exceptional return of app.get ... ed);\\n}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:5:152:7 | get | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:5:152:7 | get | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:5:152:7 | get | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | CalleeFlexibleAccessPath | app.get |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | calleeImports | express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:9:152:20 | '/some/path' | receiverName | app |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad1 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad2 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad3 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad4 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad5 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad5 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad6 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad6 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad7 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad7 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad8 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad8 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad9 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad9 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad10 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad10 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad11 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad11 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad12 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad12 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad13 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad13 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad13 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad14 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad14 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad14 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad15 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad15 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad15 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad16 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad16 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad16 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad17 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad17 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad17 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | flowifyComments | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | flowifyComments | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | flowifyComments | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good1 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good1 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good2 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good3 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good3 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good4 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good4 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good5 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good5 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good5 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good6 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good6 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good6 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good7 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good7 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good7 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good8 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good8 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good8 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good9 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good9 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good9 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good10 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good10 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good10 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good11 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good11 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good11 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good12 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good12 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good12 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | this | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | this | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:152:22 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | 'arguments' object of anonymous function | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | 'arguments' object of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | exceptional return of anonymous function | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | exceptional return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | CalleeFlexibleAccessPath | app.get |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | calleeImports | express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | functio ... ted);\\n} | receiverName | app |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | return of anonymous function | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | return of anonymous function | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:23:189:1 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:32:152:34 | req | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:37:152:39 | res | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:37:152:39 | res | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:37:152:39 | res | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:37:152:39 | res | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:152:37:152:39 | res | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:15 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:15 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:15 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:15 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:15 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrust ... am("p") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrust ... am("p") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrust ... am("p") | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrust ... am("p") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrust ... am("p") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrusted | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:7:153:32 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:21 | req | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:21 | req | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:21 | req | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:21 | req | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:21 | req | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:27 | req.param | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:27 | req.param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:27 | req.param | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:27 | req.param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:27 | req.param | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | exceptional return of req.param("p") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | exceptional return of req.param("p") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | exceptional return of req.param("p") | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | exceptional return of req.param("p") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | exceptional return of req.param("p") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | req.param("p") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | req.param("p") | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | req.param("p") | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | req.param("p") | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:19:153:32 | req.param("p") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:23:153:27 | param | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:23:153:27 | param | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:23:153:27 | param | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:23:153:27 | param | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:23:153:27 | param | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | CalleeFlexibleAccessPath | req.param |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:153:29:153:31 | "p" | receiverName | req |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:6 | bad1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:6 | bad1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:6 | bad1 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:6 | bad1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:6 | bad1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | bad1(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | bad1(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | bad1(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | bad1(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | bad1(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | exceptional return of bad1(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | exceptional return of bad1(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | exceptional return of bad1(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | exceptional return of bad1(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:3:158:17 | exceptional return of bad1(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | CalleeFlexibleAccessPath | bad1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:158:8:158:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:6 | bad2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:6 | bad2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:6 | bad2 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:6 | bad2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:6 | bad2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | bad2(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | bad2(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | bad2(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | bad2(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | bad2(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | exceptional return of bad2(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | exceptional return of bad2(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | exceptional return of bad2(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | exceptional return of bad2(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:3:159:17 | exceptional return of bad2(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | CalleeFlexibleAccessPath | bad2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:159:8:159:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:6 | bad3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:6 | bad3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:6 | bad3 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:6 | bad3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:6 | bad3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | bad3(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | bad3(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | bad3(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | bad3(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | bad3(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | exceptional return of bad3(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | exceptional return of bad3(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | exceptional return of bad3(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | exceptional return of bad3(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:3:160:17 | exceptional return of bad3(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | CalleeFlexibleAccessPath | bad3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:160:8:160:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:6 | bad4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:6 | bad4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:6 | bad4 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:6 | bad4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:6 | bad4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | bad4(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | bad4(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | bad4(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | bad4(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | bad4(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | exceptional return of bad4(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | exceptional return of bad4(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | exceptional return of bad4(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | exceptional return of bad4(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:3:161:17 | exceptional return of bad4(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | CalleeFlexibleAccessPath | bad4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:161:8:161:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:6 | bad5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:6 | bad5 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:6 | bad5 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:6 | bad5 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:6 | bad5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | bad5(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | bad5(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | bad5(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | bad5(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | bad5(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | exceptional return of bad5(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | exceptional return of bad5(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | exceptional return of bad5(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | exceptional return of bad5(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:3:162:17 | exceptional return of bad5(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | CalleeFlexibleAccessPath | bad5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:162:8:162:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:6 | bad6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:6 | bad6 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:6 | bad6 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:6 | bad6 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:6 | bad6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | bad6(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | bad6(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | bad6(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | bad6(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | bad6(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | exceptional return of bad6(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | exceptional return of bad6(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | exceptional return of bad6(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | exceptional return of bad6(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:3:163:17 | exceptional return of bad6(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | CalleeFlexibleAccessPath | bad6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:163:8:163:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:6 | bad7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:6 | bad7 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:6 | bad7 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:6 | bad7 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:6 | bad7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | bad7(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | bad7(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | bad7(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | bad7(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | bad7(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | exceptional return of bad7(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | exceptional return of bad7(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | exceptional return of bad7(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | exceptional return of bad7(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:3:164:17 | exceptional return of bad7(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | CalleeFlexibleAccessPath | bad7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:164:8:164:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:6 | bad8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:6 | bad8 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:6 | bad8 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:6 | bad8 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:6 | bad8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | bad8(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | bad8(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | bad8(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | bad8(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | bad8(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | exceptional return of bad8(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | exceptional return of bad8(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | exceptional return of bad8(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | exceptional return of bad8(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:3:165:17 | exceptional return of bad8(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | CalleeFlexibleAccessPath | bad8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:165:8:165:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:6 | bad9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:6 | bad9 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:6 | bad9 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:6 | bad9 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:6 | bad9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | bad9(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | bad9(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | bad9(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | bad9(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | bad9(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | exceptional return of bad9(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | exceptional return of bad9(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | exceptional return of bad9(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | exceptional return of bad9(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:3:166:17 | exceptional return of bad9(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | CalleeFlexibleAccessPath | bad9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:166:8:166:16 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:7 | bad10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:7 | bad10 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:7 | bad10 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:7 | bad10 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:7 | bad10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | bad10(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | bad10(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | bad10(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | bad10(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | bad10(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | exceptional return of bad10(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | exceptional return of bad10(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | exceptional return of bad10(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | exceptional return of bad10(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:3:167:18 | exceptional return of bad10(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | CalleeFlexibleAccessPath | bad10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:167:9:167:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:7 | bad11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:7 | bad11 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:7 | bad11 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:7 | bad11 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:7 | bad11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | bad11(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | bad11(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | bad11(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | bad11(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | bad11(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | exceptional return of bad11(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | exceptional return of bad11(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | exceptional return of bad11(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | exceptional return of bad11(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:3:168:18 | exceptional return of bad11(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | CalleeFlexibleAccessPath | bad11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:168:9:168:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:7 | bad12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:7 | bad12 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:7 | bad12 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:7 | bad12 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:7 | bad12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | bad12(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | bad12(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | bad12(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | bad12(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | bad12(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | exceptional return of bad12(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | exceptional return of bad12(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | exceptional return of bad12(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | exceptional return of bad12(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:3:169:18 | exceptional return of bad12(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | CalleeFlexibleAccessPath | bad12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:169:9:169:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:7 | bad13 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:7 | bad13 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:7 | bad13 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:7 | bad13 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:7 | bad13 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | bad13(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | bad13(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | bad13(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | bad13(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | bad13(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | exceptional return of bad13(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | exceptional return of bad13(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | exceptional return of bad13(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | exceptional return of bad13(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:3:170:18 | exceptional return of bad13(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | CalleeFlexibleAccessPath | bad13 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:170:9:170:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:7 | bad14 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:7 | bad14 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:7 | bad14 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:7 | bad14 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:7 | bad14 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | bad14(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | bad14(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | bad14(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | bad14(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | bad14(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | exceptional return of bad14(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | exceptional return of bad14(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | exceptional return of bad14(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | exceptional return of bad14(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:3:171:18 | exceptional return of bad14(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | CalleeFlexibleAccessPath | bad14 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:171:9:171:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:7 | bad15 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:7 | bad15 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:7 | bad15 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:7 | bad15 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:7 | bad15 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | bad15(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | bad15(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | bad15(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | bad15(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | bad15(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | exceptional return of bad15(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | exceptional return of bad15(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | exceptional return of bad15(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | exceptional return of bad15(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:3:172:18 | exceptional return of bad15(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | CalleeFlexibleAccessPath | bad15 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:172:9:172:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:7 | bad16 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:7 | bad16 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:7 | bad16 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:7 | bad16 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:7 | bad16 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | bad16(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | bad16(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | bad16(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | bad16(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | bad16(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | exceptional return of bad16(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | exceptional return of bad16(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | exceptional return of bad16(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | exceptional return of bad16(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:3:173:18 | exceptional return of bad16(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | CalleeFlexibleAccessPath | bad16 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:173:9:173:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:7 | bad17 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:7 | bad17 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:7 | bad17 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:7 | bad17 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:7 | bad17 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | bad17(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | bad17(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | bad17(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | bad17(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | bad17(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | exceptional return of bad17(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | exceptional return of bad17(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | exceptional return of bad17(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | exceptional return of bad17(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:3:174:18 | exceptional return of bad17(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | CalleeFlexibleAccessPath | bad17 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:174:9:174:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:7 | good1 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:7 | good1 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:7 | good1 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:7 | good1 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:7 | good1 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | exceptional return of good1(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | exceptional return of good1(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | exceptional return of good1(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | exceptional return of good1(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | exceptional return of good1(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | good1(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | good1(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | good1(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | good1(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:3:176:18 | good1(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | CalleeFlexibleAccessPath | good1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:176:9:176:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:7 | good2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:7 | good2 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:7 | good2 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:7 | good2 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:7 | good2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | exceptional return of good2(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | exceptional return of good2(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | exceptional return of good2(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | exceptional return of good2(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | exceptional return of good2(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | good2(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | good2(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | good2(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | good2(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:3:177:18 | good2(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | CalleeFlexibleAccessPath | good2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:177:9:177:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:7 | good3 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:7 | good3 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:7 | good3 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:7 | good3 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:7 | good3 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | exceptional return of good3(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | exceptional return of good3(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | exceptional return of good3(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | exceptional return of good3(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | exceptional return of good3(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | good3(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | good3(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | good3(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | good3(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:3:178:18 | good3(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | CalleeFlexibleAccessPath | good3 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:178:9:178:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:7 | good4 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:7 | good4 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:7 | good4 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:7 | good4 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:7 | good4 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | exceptional return of good4(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | exceptional return of good4(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | exceptional return of good4(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | exceptional return of good4(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | exceptional return of good4(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | good4(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | good4(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | good4(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | good4(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:3:179:18 | good4(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | CalleeFlexibleAccessPath | good4 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:179:9:179:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:7 | good5 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:7 | good5 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:7 | good5 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:7 | good5 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:7 | good5 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | exceptional return of good5(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | exceptional return of good5(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | exceptional return of good5(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | exceptional return of good5(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | exceptional return of good5(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | good5(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | good5(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | good5(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | good5(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:3:180:18 | good5(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | CalleeFlexibleAccessPath | good5 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:180:9:180:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:7 | good6 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:7 | good6 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:7 | good6 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:7 | good6 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:7 | good6 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | exceptional return of good6(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | exceptional return of good6(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | exceptional return of good6(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | exceptional return of good6(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | exceptional return of good6(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | good6(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | good6(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | good6(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | good6(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:3:181:18 | good6(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | CalleeFlexibleAccessPath | good6 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:181:9:181:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:7 | good7 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:7 | good7 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:7 | good7 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:7 | good7 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:7 | good7 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | exceptional return of good7(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | exceptional return of good7(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | exceptional return of good7(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | exceptional return of good7(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | exceptional return of good7(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | good7(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | good7(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | good7(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | good7(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:3:182:18 | good7(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | CalleeFlexibleAccessPath | good7 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:182:9:182:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:7 | good8 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:7 | good8 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:7 | good8 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:7 | good8 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:7 | good8 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | exceptional return of good8(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | exceptional return of good8(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | exceptional return of good8(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | exceptional return of good8(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | exceptional return of good8(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | good8(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | good8(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | good8(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | good8(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:3:183:18 | good8(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | CalleeFlexibleAccessPath | good8 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:183:9:183:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:7 | good9 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:7 | good9 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:7 | good9 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:7 | good9 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:7 | good9 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | exceptional return of good9(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | exceptional return of good9(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | exceptional return of good9(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | exceptional return of good9(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | exceptional return of good9(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | good9(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | good9(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | good9(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | good9(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:3:184:18 | good9(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | CalleeFlexibleAccessPath | good9 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:184:9:184:17 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:8 | good10 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:8 | good10 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:8 | good10 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:8 | good10 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:8 | good10 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | exceptional return of good10(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | exceptional return of good10(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | exceptional return of good10(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | exceptional return of good10(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | exceptional return of good10(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | good10(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | good10(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | good10(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | good10(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:3:185:19 | good10(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | CalleeFlexibleAccessPath | good10 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:185:10:185:18 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:17 | flowifyComments | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:17 | flowifyComments | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:17 | flowifyComments | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:17 | flowifyComments | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:17 | flowifyComments | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | exceptional return of flowify ... rusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | exceptional return of flowify ... rusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | exceptional return of flowify ... rusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | exceptional return of flowify ... rusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | exceptional return of flowify ... rusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | flowify ... rusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | flowify ... rusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | flowify ... rusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | flowify ... rusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:3:186:28 | flowify ... rusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | CalleeFlexibleAccessPath | flowifyComments |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:186:19:186:27 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:8 | good11 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:8 | good11 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:8 | good11 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:8 | good11 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:8 | good11 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | exceptional return of good11(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | exceptional return of good11(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | exceptional return of good11(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | exceptional return of good11(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | exceptional return of good11(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | good11(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | good11(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | good11(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | good11(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:3:187:19 | good11(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | CalleeFlexibleAccessPath | good11 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:187:10:187:18 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:8 | good12 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:8 | good12 | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:8 | good12 | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:8 | good12 | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:8 | good12 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | exceptional return of good12(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | exceptional return of good12(untrusted) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | exceptional return of good12(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | exceptional return of good12(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | exceptional return of good12(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | good12(untrusted) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | good12(untrusted) | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | good12(untrusted) | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | good12(untrusted) | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:3:188:19 | good12(untrusted) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | CalleeFlexibleAccessPath | good12 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | contextSurroundingFunctionParameters | (req, res) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | enclosingFunctionBody | req res untrusted req param p bad1 untrusted bad2 untrusted bad3 untrusted bad4 untrusted bad5 untrusted bad6 untrusted bad7 untrusted bad8 untrusted bad9 untrusted bad10 untrusted bad11 untrusted bad12 untrusted bad13 untrusted bad14 untrusted bad15 untrusted bad16 untrusted bad17 untrusted good1 untrusted good2 untrusted good3 untrusted good4 untrusted good5 untrusted good6 untrusted good7 untrusted good8 untrusted good9 untrusted good10 untrusted flowifyComments untrusted good11 untrusted good12 untrusted |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | enclosingFunctionName | app.get#functionalargument |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:188:10:188:18 | untrusted | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:1:194:2 | (functi ... T OK\\n}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:1:194:2 | (functi ... T OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:1:194:2 | (functi ... T OK\\n}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:191:1 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:191:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:191:1 | this | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:191:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:191:1 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | exceptional return of anonymous function | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | return of anonymous function | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:2:194:1 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:191:12:191:12 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:13 | indirect | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:13 | indirect | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:13 | indirect | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:13 | indirect | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:13 | indirect | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect = /'/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect = /'/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect = /'/ | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect = /'/ | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:6:192:19 | indirect = /'/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:17:192:19 | /'/ | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:17:192:19 | /'/ | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:17:192:19 | /'/ | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:17:192:19 | /'/ | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:192:17:192:19 | /'/ | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:9 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:9 | s | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:9 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:17 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:17 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:17 | s.replace | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:17 | s.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:17 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | exceptional return of s.repla ... ct, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | exceptional return of s.repla ... ct, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | exceptional return of s.repla ... ct, "") | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | exceptional return of s.repla ... ct, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | exceptional return of s.repla ... ct, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | s.repla ... ct, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | s.repla ... ct, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | s.repla ... ct, "") | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | s.repla ... ct, "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:9:193:31 | s.repla ... ct, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:11:193:17 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:11:193:17 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:11:193:17 | replace | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:11:193:17 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:11:193:17 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:19:193:26 | indirect | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | enclosingFunctionBody | s indirect /'/ s replace indirect  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:193:29:193:30 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:1:199:2 | (functi ... / OK\\n}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:1:199:2 | (functi ... / OK\\n}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:1:199:2 | (functi ... / OK\\n}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:196:1 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:196:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:196:1 | this | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:196:1 | this | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:196:1 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | 'arguments' object of anonymous function | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | exceptional return of anonymous function | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | return of anonymous function | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | return of anonymous function | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:2:199:1 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:196:12:196:12 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:2 | s | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:2 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:10 | s.replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:10 | s.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | exceptional return of s.replace('"', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | exceptional return of s.replace('"', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | exceptional return of s.replace('"', '') | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | exceptional return of s.replace('"', '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | exceptional return of s.replace('"', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | s.replace('"', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | s.replace('"', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | s.replace('"', '') | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | s.replace('"', '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:19 | s.replace('"', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:27 | s.repla ... replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:27 | s.repla ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | exceptional return of s.repla ... "', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | exceptional return of s.repla ... "', '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | exceptional return of s.repla ... "', '') | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | exceptional return of s.repla ... "', '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | exceptional return of s.repla ... "', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | s.repla ... "', '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | s.repla ... "', '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | s.repla ... "', '') | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | s.repla ... "', '') | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:2:197:36 | s.repla ... "', '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:4:197:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:4:197:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:4:197:10 | replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:4:197:10 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:4:197:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:12:197:14 | '"' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:17:197:18 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:21:197:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:21:197:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:21:197:27 | replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:21:197:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:21:197:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:29:197:31 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:197:34:197:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:2 | s | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:2 | s | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:10 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:10 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:10 | s.replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:10 | s.replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:10 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | exceptional return of s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | exceptional return of s.replace("'", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | exceptional return of s.replace("'", "") | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | exceptional return of s.replace("'", "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | exceptional return of s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | s.replace("'", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | s.replace("'", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | s.replace("'", "") | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | s.replace("'", "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:19 | s.replace("'", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:27 | s.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:27 | s.repla ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:27 | s.repla ... replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:27 | s.repla ... replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:27 | s.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | exceptional return of s.repla ... '", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | exceptional return of s.repla ... '", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | exceptional return of s.repla ... '", "") | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | exceptional return of s.repla ... '", "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | exceptional return of s.repla ... '", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | s.repla ... '", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | s.repla ... '", "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | s.repla ... '", "") | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | s.repla ... '", "") | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:2:198:36 | s.repla ... '", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:4:198:10 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:4:198:10 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:4:198:10 | replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:4:198:10 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:4:198:10 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:12:198:14 | "'" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:17:198:18 | "" | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:21:198:27 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:21:198:27 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:21:198:27 | replace | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:21:198:27 | replace | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:21:198:27 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:29:198:31 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | CalleeFlexibleAccessPath | s.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | enclosingFunctionBody | s s replace "  replace "  s replace '  replace '  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | enclosingFunctionName |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:198:34:198:35 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:201:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:201:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:201:0 | this | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:201:0 | this | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:201:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | 'arguments' object of function bad18 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | 'arguments' object of function bad18 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | 'arguments' object of function bad18 | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | 'arguments' object of function bad18 | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | 'arguments' object of function bad18 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | exceptional return of function bad18 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | exceptional return of function bad18 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | exceptional return of function bad18 | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | exceptional return of function bad18 | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | exceptional return of function bad18 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | functio ... OT OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | functio ... OT OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | functio ... OT OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | return of function bad18 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | return of function bad18 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | return of function bad18 | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | return of function bad18 | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:1:203:1 | return of function bad18 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:10:201:14 | bad18 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:10:201:14 | bad18 | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:10:201:14 | bad18 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:201:16:201:16 | p | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:10 | p | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:10 | p | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:10 | p | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:10 | p | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:10 | p | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:18 | p.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:18 | p.replace | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:18 | p.replace | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:18 | p.replace | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:18 | p.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | exceptional return of p.repla ... /", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | exceptional return of p.repla ... /", "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | exceptional return of p.repla ... /", "") | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | exceptional return of p.repla ... /", "") | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | exceptional return of p.repla ... /", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | p.repla ... /", "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | p.repla ... /", "") | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | p.repla ... /", "") | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | p.repla ... /", "") | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:10:202:30 | p.repla ... /", "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:12:202:18 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:12:202:18 | replace | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:12:202:18 | replace | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:12:202:18 | replace | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:12:202:18 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | CalleeFlexibleAccessPath | p.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:20:202:25 | "/../" | receiverName | p |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | CalleeFlexibleAccessPath | p.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | contextSurroundingFunctionParameters | (p) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | enclosingFunctionBody | p p replace /../  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | enclosingFunctionName | bad18 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:202:28:202:29 | "" | receiverName | p |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:205:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:205:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:205:0 | this | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:205:0 | this | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:205:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | 'arguments' object of function typicalBadHtmlSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | 'arguments' object of function typicalBadHtmlSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | 'arguments' object of function typicalBadHtmlSanitizers | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | 'arguments' object of function typicalBadHtmlSanitizers | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | 'arguments' object of function typicalBadHtmlSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | exceptional return of function typicalBadHtmlSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | exceptional return of function typicalBadHtmlSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | exceptional return of function typicalBadHtmlSanitizers | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | exceptional return of function typicalBadHtmlSanitizers | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | exceptional return of function typicalBadHtmlSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | return of function typicalBadHtmlSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | return of function typicalBadHtmlSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | return of function typicalBadHtmlSanitizers | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | return of function typicalBadHtmlSanitizers | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:1:240:1 | return of function typicalBadHtmlSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:10:205:33 | typical ... itizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:10:205:33 | typical ... itizers | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:10:205:33 | typical ... itizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:205:35:205:35 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:2:206:24 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:6:206:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:6:206:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:6:206:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:6:206:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:6:206:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:14:206:20 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:206:22:206:23 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:2:207:26 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:6:207:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:6:207:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:6:207:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:6:207:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:6:207:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:14:207:21 | /[<>&]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:207:24:207:25 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:2:208:26 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:6:208:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:6:208:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:6:208:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:6:208:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:6:208:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:14:208:21 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:208:24:208:25 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:22 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:30 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:30 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:30 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:30 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:30 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:2:209:40 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:6:209:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:6:209:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:6:209:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:6:209:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:6:209:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:14:209:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:20:209:21 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:24:209:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:24:209:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:24:209:30 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:24:209:30 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:24:209:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:32:209:35 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:209:38:209:39 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:22 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:30 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:30 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:30 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:30 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:30 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:40 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:48 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:48 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:48 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:48 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:48 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:2:210:58 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:6:210:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:6:210:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:6:210:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:6:210:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:6:210:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:14:210:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:20:210:21 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:24:210:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:24:210:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:24:210:30 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:24:210:30 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:24:210:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:32:210:35 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:38:210:39 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:42:210:48 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:42:210:48 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:42:210:48 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:42:210:48 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:42:210:48 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:50:210:53 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:210:56:210:57 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:22 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:30 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:30 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:30 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:30 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:30 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:40 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:48 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:48 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:48 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:48 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:48 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:2:211:58 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:6:211:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:6:211:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:6:211:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:6:211:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:6:211:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:14:211:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:20:211:21 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:24:211:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:24:211:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:24:211:30 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:24:211:30 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:24:211:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:32:211:35 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:38:211:39 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:42:211:48 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:42:211:48 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:42:211:48 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:42:211:48 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:42:211:48 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:50:211:53 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:211:56:211:57 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:22 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:30 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:30 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:30 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:30 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:30 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:40 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:48 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:48 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:48 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:48 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:48 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:2:212:58 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:6:212:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:6:212:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:6:212:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:6:212:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:6:212:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:14:212:17 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:20:212:21 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:24:212:30 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:24:212:30 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:24:212:30 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:24:212:30 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:24:212:30 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:32:212:35 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:38:212:39 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:42:212:48 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:42:212:48 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:42:212:48 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:42:212:48 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:42:212:48 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:50:212:53 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:212:56:212:57 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:6 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:6 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:6 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:6 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:6 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s = s() ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s = s() ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s = s() ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s = s() ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:6:214:30 | s = s() ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:10 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:10 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:10 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:20 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:20 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:20 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:10:214:30 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:14:214:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:14:214:20 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:14:214:20 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:14:214:20 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:14:214:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:22:214:25 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:214:28:214:29 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s = s.r ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s = s.r ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s = s.r ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s = s.r ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:2:215:24 | s = s.r ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:6 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:6 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:6 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:6 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:6 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:14 | s.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:14 | s.replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:14 | s.replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:14 | s.replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:14 | s.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | exceptional return of s.replace(/>/g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | exceptional return of s.replace(/>/g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | exceptional return of s.replace(/>/g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | exceptional return of s.replace(/>/g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | exceptional return of s.replace(/>/g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | s.replace(/>/g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | s.replace(/>/g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | s.replace(/>/g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | s.replace(/>/g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:6:215:24 | s.replace(/>/g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:8:215:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:8:215:14 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:8:215:14 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:8:215:14 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:8:215:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:16:215:19 | />/g | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | CalleeFlexibleAccessPath | s.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:215:22:215:23 | '' | receiverName | s |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | exceptional return of s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | exceptional return of s().rep ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | exceptional return of s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | s().rep ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:26 | s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:34 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:34 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:34 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:34 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:34 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | exceptional return of s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | exceptional return of s().rep ...  '&gt') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | exceptional return of s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | s().rep ...  '&gt') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:47 | s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:55 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:55 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:55 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:55 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:55 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | exceptional return of s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | exceptional return of s().rep ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | exceptional return of s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | exceptional return of s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | exceptional return of s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | s().rep ... &amp;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:70 | s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:78 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:78 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:78 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:78 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:78 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | exceptional return of s().rep ... &#34;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | exceptional return of s().rep ... &#34;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | exceptional return of s().rep ... &#34;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | exceptional return of s().rep ... &#34;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | exceptional return of s().rep ... &#34;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | s().rep ... &#34;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | s().rep ... &#34;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | s().rep ... &#34;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | s().rep ... &#34;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:2:216:93 | s().rep ... &#34;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:6:216:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:6:216:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:6:216:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:6:216:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:6:216:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:14:216:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:20:216:25 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:28:216:34 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:28:216:34 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:28:216:34 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:28:216:34 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:28:216:34 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:36:216:39 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:42:216:46 | '&gt' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:49:216:55 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:49:216:55 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:49:216:55 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:49:216:55 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:49:216:55 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:57:216:60 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:63:216:69 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:72:216:78 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:72:216:78 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:72:216:78 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:72:216:78 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:72:216:78 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:80:216:83 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:216:86:216:92 | '&#34;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | exceptional return of s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | exceptional return of s().rep ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | exceptional return of s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | s().rep ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:26 | s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:34 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:34 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:34 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:34 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:34 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | exceptional return of s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | exceptional return of s().rep ...  '&gt') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | exceptional return of s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | s().rep ...  '&gt') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:47 | s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:55 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:55 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:55 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:55 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:55 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | exceptional return of s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | exceptional return of s().rep ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | exceptional return of s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | exceptional return of s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | exceptional return of s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | s().rep ... &amp;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:70 | s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:78 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:78 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:78 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:78 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:78 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | exceptional return of s().rep ... &#39;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | exceptional return of s().rep ... &#39;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | exceptional return of s().rep ... &#39;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | exceptional return of s().rep ... &#39;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | exceptional return of s().rep ... &#39;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | s().rep ... &#39;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | s().rep ... &#39;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | s().rep ... &#39;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | s().rep ... &#39;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:2:217:93 | s().rep ... &#39;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:6:217:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:6:217:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:6:217:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:6:217:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:6:217:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:14:217:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:20:217:25 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:28:217:34 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:28:217:34 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:28:217:34 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:28:217:34 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:28:217:34 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:36:217:39 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:42:217:46 | '&gt' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:49:217:55 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:49:217:55 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:49:217:55 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:49:217:55 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:49:217:55 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:57:217:60 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:63:217:69 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:72:217:78 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:72:217:78 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:72:217:78 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:72:217:78 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:72:217:78 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:80:217:83 | /'/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:217:86:217:92 | '&#39;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | exceptional return of s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | exceptional return of s().rep ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | exceptional return of s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | s().rep ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:26 | s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:34 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:34 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:34 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:34 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:34 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | exceptional return of s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | exceptional return of s().rep ...  '&gt') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | exceptional return of s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | exceptional return of s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | s().rep ...  '&gt') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | s().rep ...  '&gt') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | s().rep ...  '&gt') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | s().rep ...  '&gt') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:47 | s().rep ...  '&gt') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:55 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:55 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:55 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:55 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:55 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | exceptional return of s().rep ... . */ }) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | exceptional return of s().rep ... . */ }) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | exceptional return of s().rep ... . */ }) | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | exceptional return of s().rep ... . */ }) | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | exceptional return of s().rep ... . */ }) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | s().rep ... . */ }) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | s().rep ... . */ }) | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | s().rep ... . */ }) | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | s().rep ... . */ }) | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:2:219:89 | s().rep ... . */ }) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:6:219:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:6:219:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:6:219:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:6:219:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:6:219:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:14:219:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:20:219:25 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:28:219:34 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:28:219:34 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:28:219:34 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:28:219:34 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:28:219:34 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:36:219:39 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:42:219:46 | '&gt' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:49:219:55 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:49:219:55 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:49:219:55 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:49:219:55 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:49:219:55 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:57:219:58 | RE | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:60 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:60 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:60 | this | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:60 | this | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:60 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | 'arguments' object of anonymous function | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | 'arguments' object of anonymous function | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | exceptional return of anonymous function | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | exceptional return of anonymous function | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | contextSurroundingFunctionParameters | (s)\n(match) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | functio ... .. */ } | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | return of anonymous function | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | return of anonymous function | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:61:219:88 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:70:219:74 | match | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:70:219:74 | match | contextSurroundingFunctionParameters | (s)\n(match) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:70:219:74 | match | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:70:219:74 | match | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:219:70:219:74 | match | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:2:221:27 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:6:221:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:6:221:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:6:221:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:6:221:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:6:221:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:14:221:23 | /[<>'"&]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:221:25:221:26 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | exceptional return of s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | exceptional return of s().rep ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | exceptional return of s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | exceptional return of s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | s().rep ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:26 | s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:34 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:34 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:34 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:34 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:34 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | exceptional return of s().rep ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | exceptional return of s().rep ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | exceptional return of s().rep ... '&gt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | exceptional return of s().rep ... '&gt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | exceptional return of s().rep ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | s().rep ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | s().rep ... '&gt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | s().rep ... '&gt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | s().rep ... '&gt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:48 | s().rep ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:56 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:56 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:56 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:56 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:56 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | exceptional return of s().rep ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | exceptional return of s().rep ... quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | exceptional return of s().rep ... quot;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | exceptional return of s().rep ... quot;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | exceptional return of s().rep ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | s().rep ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | s().rep ... quot;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | s().rep ... quot;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | s().rep ... quot;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:72 | s().rep ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:80 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:80 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:80 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:80 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:80 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | exceptional return of s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | exceptional return of s().rep ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | exceptional return of s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | exceptional return of s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | exceptional return of s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | s().rep ... &amp;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:2:223:107 | s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:6:223:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:6:223:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:6:223:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:6:223:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:6:223:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:14:223:17 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:20:223:25 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:28:223:34 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:28:223:34 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:28:223:34 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:28:223:34 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:28:223:34 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:36:223:39 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:42:223:47 | '&gt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:50:223:56 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:50:223:56 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:50:223:56 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:50:223:56 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:50:223:56 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:58:223:61 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:64:223:71 | '&quot;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:74:223:80 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:74:223:80 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:74:223:80 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:74:223:80 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:74:223:80 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:82:223:97 | /&(?![\\w\\#]+;)/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:223:100:223:106 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | exceptional return of s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | exceptional return of s().rep ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | exceptional return of s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | exceptional return of s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | exceptional return of s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | s().rep ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | s().rep ... &amp;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | s().rep ... &amp;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | s().rep ... &amp;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:54 | s().rep ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:62 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:62 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:62 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:62 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:62 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | exceptional return of s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | exceptional return of s().rep ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | exceptional return of s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | exceptional return of s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | exceptional return of s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | s().rep ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | s().rep ... '&lt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | s().rep ... '&lt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | s().rep ... '&lt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:76 | s().rep ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:84 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:84 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:84 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:84 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:84 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | exceptional return of s().rep ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | exceptional return of s().rep ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | exceptional return of s().rep ... '&gt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | exceptional return of s().rep ... '&gt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | exceptional return of s().rep ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | s().rep ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | s().rep ... '&gt;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | s().rep ... '&gt;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | s().rep ... '&gt;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:98 | s().rep ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:106 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:106 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:106 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:106 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:106 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | exceptional return of s().rep ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | exceptional return of s().rep ... quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | exceptional return of s().rep ... quot;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | exceptional return of s().rep ... quot;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | exceptional return of s().rep ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | s().rep ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | s().rep ... quot;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | s().rep ... quot;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | s().rep ... quot;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:122 | s().rep ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:130 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:130 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:130 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:130 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:130 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | exceptional return of s().rep ... apos;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | exceptional return of s().rep ... apos;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | exceptional return of s().rep ... apos;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | exceptional return of s().rep ... apos;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | exceptional return of s().rep ... apos;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | s().rep ... apos;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | s().rep ... apos;') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | s().rep ... apos;') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | s().rep ... apos;') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:2:225:146 | s().rep ... apos;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:6:225:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:6:225:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:6:225:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:6:225:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:6:225:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:20 | !encode | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:20 | !encode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:20 | !encode | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:20 | !encode | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:20 | !encode | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:14:225:44 | !encode ...  : /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:15:225:20 | encode | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:15:225:20 | encode | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:15:225:20 | encode | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:15:225:20 | encode | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:15:225:20 | encode | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:24:225:37 | /&(?!#?\\w+;)/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:24:225:37 | /&(?!#?\\w+;)/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:24:225:37 | /&(?!#?\\w+;)/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:24:225:37 | /&(?!#?\\w+;)/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:24:225:37 | /&(?!#?\\w+;)/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:41:225:44 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:41:225:44 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:41:225:44 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:41:225:44 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:41:225:44 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:47:225:53 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:56:225:62 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:56:225:62 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:56:225:62 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:56:225:62 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:56:225:62 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:64:225:67 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:70:225:75 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:78:225:84 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:78:225:84 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:78:225:84 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:78:225:84 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:78:225:84 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:86:225:89 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | CalleeFlexibleAccessPath | s().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:92:225:97 | '&gt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:100:225:106 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:100:225:106 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:100:225:106 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:100:225:106 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:100:225:106 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:108:225:111 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | CalleeFlexibleAccessPath | s().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:114:225:121 | '&quot;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:124:225:130 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:124:225:130 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:124:225:130 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:124:225:130 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:124:225:130 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | CalleeFlexibleAccessPath | s().replace().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:132:225:135 | /'/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | CalleeFlexibleAccessPath | s().replace().replace().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:225:138:225:145 | '&apos;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:2:227:36 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:6:227:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:6:227:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:6:227:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:6:227:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:6:227:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:14:227:31 | /[\\\\/:\\*\\?"<>\\\|]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:227:34:227:35 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | exceptional return of s().rep ... /g,'_') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | exceptional return of s().rep ... /g,'_') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | exceptional return of s().rep ... /g,'_') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | exceptional return of s().rep ... /g,'_') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | exceptional return of s().rep ... /g,'_') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | s().rep ... /g,'_') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | s().rep ... /g,'_') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | s().rep ... /g,'_') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | s().rep ... /g,'_') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:2:229:25 | s().rep ... /g,'_') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:6:229:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:6:229:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:6:229:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:6:229:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:6:229:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:14:229:20 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:229:22:229:24 | '_' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | exceptional return of s().rep ... "&gt;") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | exceptional return of s().rep ... "&gt;") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | exceptional return of s().rep ... "&gt;") | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | exceptional return of s().rep ... "&gt;") | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | exceptional return of s().rep ... "&gt;") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | s().rep ... "&gt;") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | s().rep ... "&gt;") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | s().rep ... "&gt;") | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | s().rep ... "&gt;") | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:2:231:26 | s().rep ... "&gt;") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:6:231:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:6:231:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:6:231:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:6:231:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:6:231:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:14:231:17 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:231:20:231:25 | "&gt;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | exceptional return of s().rep ... /g, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | exceptional return of s().rep ... /g, "") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | exceptional return of s().rep ... /g, "") | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | exceptional return of s().rep ... /g, "") | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | exceptional return of s().rep ... /g, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | s().rep ... /g, "") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | s().rep ... /g, "") | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | s().rep ... /g, "") | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | s().rep ... /g, "") | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:2:233:67 | s().rep ... /g, "") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:6:233:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:6:233:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:6:233:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:6:233:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:6:233:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:14:233:62 | /[\\#\\%4 ... aFBb]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:233:65:233:66 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:24 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:32 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:32 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:32 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:32 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:32 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:2:235:47 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:6:235:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:6:235:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:6:235:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:6:235:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:6:235:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:14:235:20 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:22:235:23 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:26:235:32 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:26:235:32 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:26:235:32 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:26:235:32 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:26:235:32 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:34:235:42 | /[^a-z]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:235:45:235:46 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:24 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:32 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:32 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:32 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:32 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:32 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:2:237:47 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:6:237:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:6:237:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:6:237:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:6:237:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:6:237:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:14:237:20 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:22:237:23 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:26:237:32 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:26:237:32 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:26:237:32 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:26:237:32 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:26:237:32 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:34:237:42 | /[^abc]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:237:45:237:46 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:2 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:2 | s | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:2 | s | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:2 | s | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:2 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | exceptional return of s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | exceptional return of s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | s() | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | s() | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | s() | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:4 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:12 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:12 | s().replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:12 | s().replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:12 | s().replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:12 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | s().rep ... ]/g,'') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | s().rep ... ]/g,'') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:24 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:32 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:32 | s().rep ... replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:32 | s().rep ... replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:32 | s().rep ... replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:32 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | s().rep ... /g, '') | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | s().rep ... /g, '') | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | s().rep ... /g, '') | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:2:239:46 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:6:239:12 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:6:239:12 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:6:239:12 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:6:239:12 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:6:239:12 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:14:239:20 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:22:239:23 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:26:239:32 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:26:239:32 | replace | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:26:239:32 | replace | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:26:239:32 | replace | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:26:239:32 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:34:239:41 | /[ -~]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | contextSurroundingFunctionParameters | (s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | enclosingFunctionBody | s s replace /[<>]/g  s replace /[<>&]/g  s replace /[<>"]/g  s replace /</g  replace />/g  s replace /</g  replace />/g  replace /&/g  s replace /</g  replace /&/g  replace />/g  s replace /&/g  replace />/g  replace /</g  s s replace /</g  s s replace />/g  s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /"/g &#34; s replace /</g &lt; replace />/g &gt replace /&/g &amp; replace /'/g &#39; s replace /</g &lt; replace />/g &gt replace RE match s replace /[<>'"&]/g  s replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /&(?![\\w\\#]+;)/g &amp; s replace encode /&(?!#?\\w+;)/g /&/g &amp; replace /</g &lt; replace />/g &gt; replace /"/g &quot; replace /'/g &apos; s replace /[\\\\/:\\*\\?"<>\\\|]/g  s replace /[<>]/g _ s replace /&/g &gt; s replace /[\\#\\%4\\/\\-\\~\\>8\\_\\@0\\!\\&3\\[651d\\=e7fA2D\\(aFBb]/g  s replace /[<>]/g  replace /[^a-z]/g  s replace /[<>]/g  replace /[^abc]/g  s replace /[<>]/g  replace /[ -~]/g  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | enclosingFunctionName | typicalBadHtmlSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:239:44:239:45 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:242:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:242:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:242:0 | this | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:242:0 | this | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:242:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | 'arguments' object of function incompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | 'arguments' object of function incompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | 'arguments' object of function incompleteHtmlAttributeSanitization | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | 'arguments' object of function incompleteHtmlAttributeSanitization | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | 'arguments' object of function incompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | exceptional return of function incompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | exceptional return of function incompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | exceptional return of function incompleteHtmlAttributeSanitization | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | exceptional return of function incompleteHtmlAttributeSanitization | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | exceptional return of function incompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | return of function incompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | return of function incompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | return of function incompleteHtmlAttributeSanitization | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | return of function incompleteHtmlAttributeSanitization | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:1:257:1 | return of function incompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:10:242:44 | incompl ... ization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:10:242:44 | incompl ... ization | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:242:10:242:44 | incompl ... ization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:31 | '="' +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:31 | '="' +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:31 | '="' +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:31 | '="' +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:31 | '="' +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:37 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:37 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:37 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:37 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:2:243:37 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:9:243:31 | s().rep ... ]/g,'') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:13:243:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:13:243:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:13:243:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:13:243:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:13:243:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:21:243:27 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:29:243:30 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:243:35:243:37 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:33 | '="' +  ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:33 | '="' +  ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:33 | '="' +  ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:33 | '="' +  ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:33 | '="' +  ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:39 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:39 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:39 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:39 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:2:244:39 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:9:244:33 | s().rep ... /g, '') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:13:244:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:13:244:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:13:244:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:13:244:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:13:244:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:21:244:28 | /[<>&]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:31:244:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:244:37:244:39 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:33 | '="' +  ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:33 | '="' +  ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:33 | '="' +  ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:33 | '="' +  ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:33 | '="' +  ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:39 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:39 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:39 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:39 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:2:245:39 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:9:245:33 | s().rep ... /g, '') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:13:245:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:13:245:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:13:245:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:13:245:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:13:245:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:21:245:28 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:31:245:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:245:37:245:39 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:33 | '="' +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:33 | '="' +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:33 | '="' +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:33 | '="' +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:33 | '="' +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:39 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:39 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:39 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:39 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:2:246:39 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:9:246:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:13:246:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:13:246:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:13:246:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:13:246:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:13:246:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:21:246:29 | /[<>&"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:31:246:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:246:37:246:39 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:31 | '="' +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:31 | '="' +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:31 | '="' +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:31 | '="' +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:31 | '="' +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:37 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:37 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:37 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:37 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:2:247:37 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:9:247:31 | s().rep ... ]/g,'') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:13:247:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:13:247:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:13:247:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:13:247:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:13:247:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:21:247:27 | /[&"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:29:247:30 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:247:35:247:37 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:33 | '="' +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:33 | '="' +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:33 | '="' +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:33 | '="' +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:33 | '="' +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:39 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:39 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:39 | '="' +  ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:39 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:2:249:39 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:9:249:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:13:249:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:13:249:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:13:249:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:13:249:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:13:249:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:21:249:29 | /[<>&']/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:31:249:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:249:37:249:39 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:5 | "='" | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:33 | "='" +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:33 | "='" +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:33 | "='" +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:33 | "='" +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:33 | "='" +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:39 | "='" +  ... ) + "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:39 | "='" +  ... ) + "'" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:39 | "='" +  ... ) + "'" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:39 | "='" +  ... ) + "'" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:2:250:39 | "='" +  ... ) + "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:9:250:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:13:250:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:13:250:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:13:250:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:13:250:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:13:250:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:21:250:29 | /[<>&"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:31:250:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:250:37:250:39 | "'" | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:5 | "='" | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:33 | "='" +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:33 | "='" +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:33 | "='" +  ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:33 | "='" +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:33 | "='" +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:39 | "='" +  ... ) + "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:39 | "='" +  ... ) + "'" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:39 | "='" +  ... ) + "'" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:39 | "='" +  ... ) + "'" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:2:251:39 | "='" +  ... ) + "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:9 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:19 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:9:251:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:13:251:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:13:251:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:13:251:19 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:13:251:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:13:251:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:21:251:29 | /[<>&']/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:31:251:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:251:37:251:39 | "'" | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:17 | 'onFunkyEvent="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:45 | 'onFunk ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:45 | 'onFunk ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:45 | 'onFunk ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:45 | 'onFunk ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:45 | 'onFunk ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:51 | 'onFunk ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:51 | 'onFunk ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:51 | 'onFunk ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:51 | 'onFunk ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:2:253:51 | 'onFunk ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:21 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:21 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:21 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:21 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:21 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:23 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:31 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:31 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:31 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:31 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:31 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:21:253:45 | s().rep ... /g, '') | stringConcatenatedWith | 'onFunkyEvent="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:25:253:31 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:25:253:31 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:25:253:31 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:25:253:31 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:25:253:31 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:33:253:40 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:43:253:44 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:253:49:253:51 | '"' | stringConcatenatedWith | 'onFunkyEvent="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:28 | '<div n ... vent="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:56 | '<div n ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:56 | '<div n ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:56 | '<div n ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:56 | '<div n ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:56 | '<div n ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:62 | '<div n ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:62 | '<div n ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:62 | '<div n ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:62 | '<div n ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:2:254:62 | '<div n ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:32 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:32 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:32 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:32 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:32 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:34 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:42 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:42 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:42 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:42 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:42 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:32:254:56 | s().rep ... /g, '') | stringConcatenatedWith | '<div noise onFunkyEvent="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:36:254:42 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:36:254:42 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:36:254:42 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:36:254:42 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:36:254:42 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:44:254:51 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:54:254:55 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:254:60:254:62 | '"' | stringConcatenatedWith | '<div noise onFunkyEvent="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:22 | '<div n ... nday="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:50 | '<div n ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:50 | '<div n ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:50 | '<div n ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:50 | '<div n ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:50 | '<div n ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:56 | '<div n ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:56 | '<div n ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:56 | '<div n ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:56 | '<div n ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:2:255:56 | '<div n ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:26 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:26 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:26 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:26 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:26 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:28 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:36 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:36 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:36 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:36 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:36 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:26:255:50 | s().rep ... /g, '') | stringConcatenatedWith | '<div noise monday="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:30:255:36 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:30:255:36 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:30:255:36 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:30:255:36 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:30:255:36 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:38:255:45 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:48:255:49 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:255:54:255:56 | '"' | stringConcatenatedWith | '<div noise monday="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:11 | 'monday="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:39 | 'monday ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:39 | 'monday ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:39 | 'monday ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:39 | 'monday ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:39 | 'monday ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:45 | 'monday ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:45 | 'monday ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:45 | 'monday ... ) + '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:45 | 'monday ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:2:256:45 | 'monday ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:15 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:15 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:15 | s | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:15 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:15 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | exceptional return of s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | s() | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:17 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:25 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:25 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:25 | s().replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:25 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:25 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:15:256:39 | s().rep ... /g, '') | stringConcatenatedWith | 'monday="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:19:256:25 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:19:256:25 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:19:256:25 | replace | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:19:256:25 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:19:256:25 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:27:256:34 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:37:256:38 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | enclosingFunctionBody | =" s replace /[<>]/g  " =" s replace /[<>&]/g  " =" s replace /[<>"]/g  " =" s replace /[<>&"]/g  " =" s replace /[&"]/g  " =" s replace /[<>&']/g  " =' s replace /[<>&"]/g  ' =' s replace /[<>&']/g  ' onFunkyEvent=" s replace /[<>"]/g  " <div noise onFunkyEvent=" s replace /[<>"]/g  " <div noise monday=" s replace /[<>"]/g  " monday=" s replace /[<>"]/g  " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:256:43:256:45 | '"' | stringConcatenatedWith | 'monday="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:0 | this | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:0 | this | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:1 | escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:1 | escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:1 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:1 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:259:1 | escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | 'arguments' object of function multiStepSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | 'arguments' object of function multiStepSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | 'arguments' object of function multiStepSanitization | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | 'arguments' object of function multiStepSanitization | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | 'arguments' object of function multiStepSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | exceptional return of function multiStepSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | exceptional return of function multiStepSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | exceptional return of function multiStepSanitization | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | exceptional return of function multiStepSanitization | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | exceptional return of function multiStepSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | functio ...  '>';\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | functio ...  '>';\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | functio ...  '>';\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | return of function multiStepSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | return of function multiStepSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | return of function multiStepSanitization | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | return of function multiStepSanitization | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:1:267:1 | return of function multiStepSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:10:259:30 | multiSt ... ization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:10:259:30 | multiSt ... ization | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:259:10:259:30 | multiSt ... ization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:260:1 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:260:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:260:1 | this | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:260:1 | this | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:260:1 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | 'arguments' object of function escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | 'arguments' object of function escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | 'arguments' object of function escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | 'arguments' object of function escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | 'arguments' object of function escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | exceptional return of function escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | exceptional return of function escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | exceptional return of function escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | exceptional return of function escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | exceptional return of function escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | functio ... ;');\\n\\t} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | functio ... ;');\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | functio ... ;');\\n\\t} | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | functio ... ;');\\n\\t} | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | functio ... ;');\\n\\t} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | return of function escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | return of function escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | return of function escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | return of function escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:2:262:2 | return of function escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:11:260:20 | escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:260:22:260:26 | value | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:14 | value | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:14 | value | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:14 | value | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:14 | value | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:14 | value | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:22 | value.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:22 | value.replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:22 | value.replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:22 | value.replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:22 | value.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | exceptional return of value.r ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | exceptional return of value.r ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | exceptional return of value.r ... &amp;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | exceptional return of value.r ... &amp;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | exceptional return of value.r ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | value.r ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | value.r ... &amp;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | value.r ... &amp;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | value.r ... &amp;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:37 | value.r ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:45 | value.r ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:45 | value.r ... replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:45 | value.r ... replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:45 | value.r ... replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:45 | value.r ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | exceptional return of value.r ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | exceptional return of value.r ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | exceptional return of value.r ... '&lt;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | exceptional return of value.r ... '&lt;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | exceptional return of value.r ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | value.r ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | value.r ... '&lt;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | value.r ... '&lt;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | value.r ... '&lt;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:59 | value.r ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:67 | value.r ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:67 | value.r ... replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:67 | value.r ... replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:67 | value.r ... replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:67 | value.r ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | exceptional return of value.r ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | exceptional return of value.r ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | exceptional return of value.r ... '&gt;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | exceptional return of value.r ... '&gt;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | exceptional return of value.r ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | value.r ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | value.r ... '&gt;') | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | value.r ... '&gt;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | value.r ... '&gt;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:10:261:81 | value.r ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:16:261:22 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:16:261:22 | replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:16:261:22 | replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:16:261:22 | replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:16:261:22 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | CalleeFlexibleAccessPath | value.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:24:261:27 | /&/g | receiverName | value |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | CalleeFlexibleAccessPath | value.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:30:261:36 | '&amp;' | receiverName | value |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:39:261:45 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:39:261:45 | replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:39:261:45 | replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:39:261:45 | replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:39:261:45 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | CalleeFlexibleAccessPath | value.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:47:261:50 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | CalleeFlexibleAccessPath | value.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:53:261:58 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:61:261:67 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:61:261:67 | replace | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:61:261:67 | replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:61:261:67 | replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:61:261:67 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | CalleeFlexibleAccessPath | value.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:69:261:72 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | CalleeFlexibleAccessPath | value.replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | contextSurroundingFunctionParameters | (value) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:261:75:261:80 | '&gt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | escapeHTML | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | this | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | this | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:263:1 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | 'arguments' object of function attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | 'arguments' object of function attr_str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | 'arguments' object of function attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | 'arguments' object of function attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | 'arguments' object of function attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | exceptional return of function attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | exceptional return of function attr_str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | exceptional return of function attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | exceptional return of function attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | exceptional return of function attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | functio ... / OK\\n\\t} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | functio ... / OK\\n\\t} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | functio ... / OK\\n\\t} | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | functio ... / OK\\n\\t} | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | functio ... / OK\\n\\t} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | return of function attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | return of function attr_str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | return of function attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | return of function attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:2:265:2 | return of function attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:11:263:18 | attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:263:20:263:20 | a | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:12 | ' ' | stringConcatenatedWith |  -endpoint- a.name + '="' + escapeHTML().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:21 | ' ' + a.name | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:21 | ' ' + a.name | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:21 | ' ' + a.name | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:21 | ' ' + a.name | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:21 | ' ' + a.name | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:28 | ' ' + a.name + '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:28 | ' ' + a.name + '="' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:28 | ' ' + a.name + '="' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:28 | ' ' + a.name + '="' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:28 | ' ' + a.name + '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:74 | ' ' + a ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:74 | ' ' + a ... quot;') | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:74 | ' ' + a ... quot;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:74 | ' ' + a ... quot;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:74 | ' ' + a ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:80 | ' ' + a ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:80 | ' ' + a ... ) + '"' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:80 | ' ' + a ... ) + '"' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:80 | ' ' + a ... ) + '"' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:10:264:80 | ' ' + a ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:16 | a | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:16 | a | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:16 | a | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:16 | a | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:16 | a | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:16:264:21 | a.name | stringConcatenatedWith | ' ' -endpoint- '="' + escapeHTML().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:18:264:21 | name | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:18:264:21 | name | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:18:264:21 | name | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:18:264:21 | name | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:18:264:21 | name | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:25:264:28 | '="' | stringConcatenatedWith | ' ' + a.name -endpoint- escapeHTML().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:41 | escapeHTML | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:41 | escapeHTML | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:41 | escapeHTML | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:41 | escapeHTML | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:41 | escapeHTML | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | escapeHTML(a.value) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | escapeHTML(a.value) | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | escapeHTML(a.value) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | escapeHTML(a.value) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | escapeHTML(a.value) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | exceptional return of escapeHTML(a.value) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | exceptional return of escapeHTML(a.value) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | exceptional return of escapeHTML(a.value) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | exceptional return of escapeHTML(a.value) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:50 | exceptional return of escapeHTML(a.value) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:58 | escapeH ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:58 | escapeH ... replace | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:58 | escapeH ... replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:58 | escapeH ... replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:58 | escapeH ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | escapeH ... quot;') | stringConcatenatedWith | ' ' + a.name + '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | exceptional return of escapeH ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | exceptional return of escapeH ... quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | exceptional return of escapeH ... quot;') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | exceptional return of escapeH ... quot;') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:32:264:74 | exceptional return of escapeH ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:43:264:43 | a | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:43:264:43 | a | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:43:264:43 | a | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:43:264:43 | a | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:43:264:43 | a | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:45:264:49 | value | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:45:264:49 | value | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:45:264:49 | value | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:45:264:49 | value | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:45:264:49 | value | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:52:264:58 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:52:264:58 | replace | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:52:264:58 | replace | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:52:264:58 | replace | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:52:264:58 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | CalleeFlexibleAccessPath | escapeHTML().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:60:264:63 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | CalleeFlexibleAccessPath | escapeHTML().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:66:264:73 | '&quot;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | contextSurroundingFunctionParameters | (a) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:264:78:264:80 | '"' | stringConcatenatedWith | ' ' + a.name + '="' + escapeHTML().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:7 | result | stringConcatenatedWith |  -endpoint- '<' + tag() + ?.map.call().join() + '>' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:68 | result  ... ) + '>' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:68 | result  ... ) + '>' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:68 | result  ... ) + '>' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:68 | result  ... ) + '>' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:2:266:68 | result  ... ) + '>' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:14 | '<' | stringConcatenatedWith | result -endpoint- tag() + ?.map.call().join() + '>' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:26 | '<' + tag(node) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:26 | '<' + tag(node) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:26 | '<' + tag(node) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:26 | '<' + tag(node) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:26 | '<' + tag(node) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:62 | '<' + t ... oin('') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:62 | '<' + t ... oin('') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:62 | '<' + t ... oin('') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:62 | '<' + t ... oin('') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:62 | '<' + t ... oin('') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:68 | '<' + t ... ) + '>' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:68 | '<' + t ... ) + '>' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:68 | '<' + t ... ) + '>' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:68 | '<' + t ... ) + '>' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:12:266:68 | '<' + t ... ) + '>' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:20 | tag | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:20 | tag | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:20 | tag | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:20 | tag | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:20 | tag | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | exceptional return of tag(node) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | exceptional return of tag(node) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | exceptional return of tag(node) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | exceptional return of tag(node) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | exceptional return of tag(node) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:18:266:26 | tag(node) | stringConcatenatedWith | result + '<' -endpoint- ?.map.call().join() + '>' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | CalleeFlexibleAccessPath | tag |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:22:266:25 | node | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:31 | [] | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:31 | [] | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:31 | [] | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:31 | [] | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:31 | [] | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:35 | [].map | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:35 | [].map | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:35 | [].map | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:35 | [].map | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:35 | [].map | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:40 | [].map.call | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:40 | [].map.call | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:40 | [].map.call | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:40 | [].map.call | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:40 | [].map.call | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | [].map. ... tr_str) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | [].map. ... tr_str) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | [].map. ... tr_str) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | [].map. ... tr_str) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | [].map. ... tr_str) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | exceptional return of [].map. ... tr_str) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | exceptional return of [].map. ... tr_str) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | exceptional return of [].map. ... tr_str) | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | exceptional return of [].map. ... tr_str) | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | exceptional return of [].map. ... tr_str) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | reflective call | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | reflective call | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | reflective call | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | reflective call | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:53 | reflective call | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:58 | [].map. ... r).join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:58 | [].map. ... r).join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:58 | [].map. ... r).join | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:58 | [].map. ... r).join | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:58 | [].map. ... r).join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | [].map. ... oin('') | stringConcatenatedWith | result + '<' + tag() -endpoint- '>' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | exceptional return of [].map. ... oin('') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | exceptional return of [].map. ... oin('') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | exceptional return of [].map. ... oin('') | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | exceptional return of [].map. ... oin('') | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:30:266:62 | exceptional return of [].map. ... oin('') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:33:266:35 | map | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:33:266:35 | map | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:33:266:35 | map | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:33:266:35 | map | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:33:266:35 | map | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:37:266:40 | call | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:37:266:40 | call | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:37:266:40 | call | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:37:266:40 | call | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:37:266:40 | call | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | CalleeFlexibleAccessPath | ?.map.call |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:42:266:42 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | CalleeFlexibleAccessPath | ?.map |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | CalleeFlexibleAccessPath | ?.map.call |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:55:266:58 | join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:55:266:58 | join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:55:266:58 | join | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:55:266:58 | join | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:55:266:58 | join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | CalleeFlexibleAccessPath | ?.map.call().join |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:60:266:61 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | enclosingFunctionBody | escapeHTML value value replace /&/g &amp; replace /</g &lt; replace />/g &gt; attr_str a   a name =" escapeHTML a value replace /"/g &quot; " result < tag node map call x attr_str join  > |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | enclosingFunctionName | multiStepSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:66:266:68 | '>' | stringConcatenatedWith | result + '<' + tag() + ?.map.call().join() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:0 | this | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:0 | this | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:269:1 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | 'arguments' object of function moreIncompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | 'arguments' object of function moreIncompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | 'arguments' object of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | 'arguments' object of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | 'arguments' object of function moreIncompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | exceptional return of function moreIncompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | exceptional return of function moreIncompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | exceptional return of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | exceptional return of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | exceptional return of function moreIncompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | return of function moreIncompleteHtmlAttributeSanitization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | return of function moreIncompleteHtmlAttributeSanitization | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | return of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | return of function moreIncompleteHtmlAttributeSanitization | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:1:297:1 | return of function moreIncompleteHtmlAttributeSanitization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:10:269:48 | moreInc ... ization | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:10:269:48 | moreInc ... ization | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:269:10:269:48 | moreInc ... ization | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:5 | '<a' | stringConcatenatedWith |  -endpoint- noise + 'onclick="javascript:document.foo.bar('' + s().replace() + ''); return false;">' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:13 | '<a' + noise | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:13 | '<a' + noise | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:13 | '<a' + noise | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:13 | '<a' + noise | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:13 | '<a' + noise | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:57 | '<a' +  ... bar(\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:57 | '<a' +  ... bar(\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:57 | '<a' +  ... bar(\\'' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:57 | '<a' +  ... bar(\\'' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:57 | '<a' +  ... bar(\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:85 | '<a' +  ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:85 | '<a' +  ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:85 | '<a' +  ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:85 | '<a' +  ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:85 | '<a' +  ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:110 | '<a' +  ... lse;">' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:110 | '<a' +  ... lse;">' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:110 | '<a' +  ... lse;">' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:110 | '<a' +  ... lse;">' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:2:270:110 | '<a' +  ... lse;">' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:9:270:13 | noise | stringConcatenatedWith | '<a' -endpoint- 'onclick="javascript:document.foo.bar('' + s().replace() + ''); return false;">' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:17:270:57 | 'onclic ... bar(\\'' | stringConcatenatedWith | '<a' + noise -endpoint- s().replace() + ''); return false;">' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:61 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:61 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:61 | s | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:61 | s | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:61 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | exceptional return of s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | exceptional return of s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:63 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:71 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:71 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:71 | s().replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:71 | s().replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:71 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:61:270:85 | s().rep ... /g, '') | stringConcatenatedWith | '<a' + noise + 'onclick="javascript:document.foo.bar('' -endpoint- ''); return false;">' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:65:270:71 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:65:270:71 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:65:270:71 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:65:270:71 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:65:270:71 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:73:270:80 | /[<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:83:270:84 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:270:89:270:110 | '\\'); r ... lse;">' | stringConcatenatedWith | '<a' + noise + 'onclick="javascript:document.foo.bar('' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:55 | '="' +  ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:55 | '="' +  ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:55 | '="' +  ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:55 | '="' +  ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:55 | '="' +  ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:61 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:61 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:61 | '="' +  ... ) + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:61 | '="' +  ... ) + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:2:271:61 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:9 | s | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:9 | s | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | exceptional return of s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | exceptional return of s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:19 | s().replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:19 | s().replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | s().rep ... ]/g,'') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | s().rep ... ]/g,'') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:31 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:39 | s().rep ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:39 | s().rep ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:39 | s().rep ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:39 | s().rep ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:39 | s().rep ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:9:271:55 | s().rep ... /g, '') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:13:271:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:13:271:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:13:271:19 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:13:271:19 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:13:271:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:21:271:27 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:29:271:30 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:33:271:39 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:33:271:39 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:33:271:39 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:33:271:39 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:33:271:39 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:41:271:50 | /[^\\w ]+/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | CalleeFlexibleAccessPath | s().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:53:271:54 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:271:59:271:61 | '"' | stringConcatenatedWith | '="' + s().replace().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:5 | '="' | stringConcatenatedWith |  -endpoint- encodeURIComponent() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:51 | '="' +  ... /g,'')) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:51 | '="' +  ... /g,'')) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:51 | '="' +  ... /g,'')) | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:51 | '="' +  ... /g,'')) | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:51 | '="' +  ... /g,'')) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:57 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:57 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:57 | '="' +  ... ) + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:57 | '="' +  ... ) + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:2:272:57 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:26 | encodeURIComponent | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:26 | encodeURIComponent | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:26 | encodeURIComponent | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:26 | encodeURIComponent | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:26 | encodeURIComponent | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | encodeU ... /g,'')) | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | exceptional return of encodeU ... /g,'')) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | exceptional return of encodeU ... /g,'')) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | exceptional return of encodeU ... /g,'')) | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | exceptional return of encodeU ... /g,'')) | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:9:272:51 | exceptional return of encodeU ... /g,'')) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:28 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:28 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:28 | s | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:28 | s | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:28 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | exceptional return of s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | exceptional return of s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:30 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:38 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:38 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:38 | s().replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:38 | s().replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:38 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | CalleeFlexibleAccessPath | encodeURIComponent |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:28:272:50 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:32:272:38 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:32:272:38 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:32:272:38 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:32:272:38 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:32:272:38 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:40:272:46 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:48:272:49 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:272:55:272:57 | '"' | stringConcatenatedWith | '="' + encodeURIComponent() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:8 | arr | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:8 | arr | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:8 | arr | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:8 | arr | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:8 | arr | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr = s ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr = s ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr = s ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr = s ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:6:274:94 | arr = s ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:12 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:12 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:12 | s | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:12 | s | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:12 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | exceptional return of s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | exceptional return of s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:14 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:18 | s().val | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:18 | s().val | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:18 | s().val | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:18 | s().val | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:18 | s().val | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | exceptional return of s().val() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | exceptional return of s().val() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | exceptional return of s().val() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | exceptional return of s().val() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | exceptional return of s().val() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | s().val() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | s().val() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | s().val() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | s().val() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:20 | s().val() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:25 | s().val().trim | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:25 | s().val().trim | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:25 | s().val().trim | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:25 | s().val().trim | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:25 | s().val().trim | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | exceptional return of s().val().trim() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | exceptional return of s().val().trim() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | exceptional return of s().val().trim() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | exceptional return of s().val().trim() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | exceptional return of s().val().trim() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | s().val().trim() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | s().val().trim() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | s().val().trim() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | s().val().trim() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:27 | s().val().trim() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:35 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:35 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:35 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:35 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:35 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:50 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:58 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:58 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:58 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:58 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:58 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:73 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:81 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:81 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:81 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:81 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:81 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:12:274:94 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:16:274:18 | val | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:16:274:18 | val | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:16:274:18 | val | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:16:274:18 | val | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:16:274:18 | val | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:22:274:25 | trim | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:22:274:25 | trim | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:22:274:25 | trim | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:22:274:25 | trim | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:22:274:25 | trim | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:29:274:35 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:29:274:35 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:29:274:35 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:29:274:35 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:29:274:35 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | CalleeFlexibleAccessPath | s().val().trim().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:37:274:44 | /^,\|,$/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | CalleeFlexibleAccessPath | s().val().trim().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:48:274:49 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:52:274:58 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:52:274:58 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:52:274:58 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:52:274:58 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:52:274:58 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | CalleeFlexibleAccessPath | s().val().trim().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:60:274:67 | /^;\|;$/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | CalleeFlexibleAccessPath | s().val().trim().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:71:274:72 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:75:274:81 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:75:274:81 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:75:274:81 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:75:274:81 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:75:274:81 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | CalleeFlexibleAccessPath | s().val().trim().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:83:274:88 | /<\|>/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | CalleeFlexibleAccessPath | s().val().trim().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:274:92:274:93 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:5 | '="' | stringConcatenatedWith |  -endpoint- arr.join() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:21 | '="' + arr.join(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:21 | '="' + arr.join(" ") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:21 | '="' + arr.join(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:21 | '="' + arr.join(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:21 | '="' + arr.join(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:27 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:27 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:27 | '="' +  ... ) + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:27 | '="' +  ... ) + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:2:275:27 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:11 | arr | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:11 | arr | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:11 | arr | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:11 | arr | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:11 | arr | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:16 | arr.join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:16 | arr.join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:16 | arr.join | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:16 | arr.join | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:16 | arr.join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | arr.join(" ") | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | exceptional return of arr.join(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | exceptional return of arr.join(" ") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | exceptional return of arr.join(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | exceptional return of arr.join(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:9:275:21 | exceptional return of arr.join(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:13:275:16 | join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:13:275:16 | join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:13:275:16 | join | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:13:275:16 | join | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:13:275:16 | join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | CalleeFlexibleAccessPath | arr.join |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:18:275:20 | " " | receiverName | arr |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:275:25:275:27 | '"' | stringConcatenatedWith | '="' + arr.join() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:9 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:9 | arr2 | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:9 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:9 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:9 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 =  ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 =  ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 =  ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 =  ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:6:276:95 | arr2 =  ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:13 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:13 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:13 | s | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:13 | s | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:13 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | exceptional return of s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | exceptional return of s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | s() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | s() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:15 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:19 | s().val | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:19 | s().val | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:19 | s().val | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:19 | s().val | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:19 | s().val | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | exceptional return of s().val() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | exceptional return of s().val() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | exceptional return of s().val() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | exceptional return of s().val() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | exceptional return of s().val() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | s().val() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | s().val() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | s().val() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | s().val() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:21 | s().val() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:26 | s().val().trim | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:26 | s().val().trim | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:26 | s().val().trim | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:26 | s().val().trim | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:26 | s().val().trim | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | exceptional return of s().val().trim() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | exceptional return of s().val().trim() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | exceptional return of s().val().trim() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | exceptional return of s().val().trim() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | exceptional return of s().val().trim() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | s().val().trim() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | s().val().trim() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | s().val().trim() | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | s().val().trim() | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:28 | s().val().trim() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:36 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:36 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:36 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:36 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:36 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:51 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:59 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:59 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:59 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:59 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:59 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:74 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:82 | s().val ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:82 | s().val ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:82 | s().val ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:82 | s().val ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:82 | s().val ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | exceptional return of s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | exceptional return of s().val ... g , '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | exceptional return of s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | exceptional return of s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | exceptional return of s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | s().val ... g , '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | s().val ... g , '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | s().val ... g , '') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | s().val ... g , '') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:13:276:95 | s().val ... g , '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:17:276:19 | val | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:17:276:19 | val | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:17:276:19 | val | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:17:276:19 | val | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:17:276:19 | val | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:23:276:26 | trim | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:23:276:26 | trim | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:23:276:26 | trim | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:23:276:26 | trim | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:23:276:26 | trim | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:30:276:36 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:30:276:36 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:30:276:36 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:30:276:36 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:30:276:36 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | CalleeFlexibleAccessPath | s().val().trim().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:38:276:45 | /^,\|,$/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | CalleeFlexibleAccessPath | s().val().trim().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:49:276:50 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:53:276:59 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:53:276:59 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:53:276:59 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:53:276:59 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:53:276:59 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | CalleeFlexibleAccessPath | s().val().trim().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:61:276:68 | /^;\|;$/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | CalleeFlexibleAccessPath | s().val().trim().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:72:276:73 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:76:276:82 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:76:276:82 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:76:276:82 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:76:276:82 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:76:276:82 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | CalleeFlexibleAccessPath | s().val().trim().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:84:276:89 | /<\|>/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | CalleeFlexibleAccessPath | s().val().trim().replace().replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:276:93:276:94 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:5 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:5 | arr2 | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:5 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:5 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:5 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 =  ... "/g,"") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 =  ... "/g,"") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 =  ... "/g,"") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 =  ... "/g,"") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:2:277:29 | arr2 =  ... "/g,"") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:12 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:12 | arr2 | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:12 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:12 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:12 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:20 | arr2.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:20 | arr2.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:20 | arr2.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:20 | arr2.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:20 | arr2.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | arr2.re ... "/g,"") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | arr2.re ... "/g,"") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | arr2.re ... "/g,"") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | arr2.re ... "/g,"") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | arr2.re ... "/g,"") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | exceptional return of arr2.re ... "/g,"") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | exceptional return of arr2.re ... "/g,"") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | exceptional return of arr2.re ... "/g,"") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | exceptional return of arr2.re ... "/g,"") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:9:277:29 | exceptional return of arr2.re ... "/g,"") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:14:277:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:14:277:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:14:277:20 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:14:277:20 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:14:277:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | CalleeFlexibleAccessPath | arr2.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:22:277:25 | /"/g | receiverName | arr2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | CalleeFlexibleAccessPath | arr2.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:277:27:277:28 | "" | receiverName | arr2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:5 | '="' | stringConcatenatedWith |  -endpoint- arr2.join() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:22 | '="' +  ... in(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:22 | '="' +  ... in(" ") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:22 | '="' +  ... in(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:22 | '="' +  ... in(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:22 | '="' +  ... in(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:28 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:28 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:28 | '="' +  ... ) + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:28 | '="' +  ... ) + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:2:278:28 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:12 | arr2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:12 | arr2 | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:12 | arr2 | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:12 | arr2 | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:12 | arr2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:17 | arr2.join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:17 | arr2.join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:17 | arr2.join | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:17 | arr2.join | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:17 | arr2.join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | arr2.join(" ") | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | exceptional return of arr2.join(" ") | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | exceptional return of arr2.join(" ") | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | exceptional return of arr2.join(" ") | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | exceptional return of arr2.join(" ") | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:9:278:22 | exceptional return of arr2.join(" ") | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:14:278:17 | join | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:14:278:17 | join | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:14:278:17 | join | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:14:278:17 | join | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:14:278:17 | join | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | CalleeFlexibleAccessPath | arr2.join |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:19:278:21 | " " | receiverName | arr2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:278:26:278:28 | '"' | stringConcatenatedWith | '="' + arr2.join() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:280:6:280:6 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:2 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:2 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:2 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:2 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:2 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x = x.r ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x = x.r ... &amp;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x = x.r ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x = x.r ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:2:281:29 | x = x.r ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:6 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:6 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:6 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:6 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:6 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:14 | x.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:14 | x.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:14 | x.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:14 | x.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:14 | x.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | exceptional return of x.repla ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | exceptional return of x.repla ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | exceptional return of x.repla ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | exceptional return of x.repla ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | exceptional return of x.repla ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | x.repla ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | x.repla ... &amp;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | x.repla ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | x.repla ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:6:281:29 | x.repla ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:8:281:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:8:281:14 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:8:281:14 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:8:281:14 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:8:281:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:16:281:19 | /&/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:281:22:281:28 | '&amp;' | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:2 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:2 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:2 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:2 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:2 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x = x.r ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x = x.r ... '&gt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x = x.r ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x = x.r ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:2:282:50 | x = x.r ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:6 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:6 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:6 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:6 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:6 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:14 | x.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:14 | x.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:14 | x.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:14 | x.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:14 | x.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | exceptional return of x.repla ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | exceptional return of x.repla ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | exceptional return of x.repla ... '&lt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | exceptional return of x.repla ... '&lt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | exceptional return of x.repla ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | x.repla ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | x.repla ... '&lt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | x.repla ... '&lt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | x.repla ... '&lt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:28 | x.repla ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:36 | x.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:36 | x.repla ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:36 | x.repla ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:36 | x.repla ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:36 | x.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | exceptional return of x.repla ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | exceptional return of x.repla ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | exceptional return of x.repla ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | exceptional return of x.repla ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | exceptional return of x.repla ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | x.repla ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | x.repla ... '&gt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | x.repla ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | x.repla ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:6:282:50 | x.repla ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:8:282:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:8:282:14 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:8:282:14 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:8:282:14 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:8:282:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:16:282:19 | /</g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:22:282:27 | '&lt;' | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:30:282:36 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:30:282:36 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:30:282:36 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:30:282:36 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:30:282:36 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:38:282:41 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | CalleeFlexibleAccessPath | x.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:282:44:282:49 | '&gt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:12 | 'onclick="' | stringConcatenatedWith |  -endpoint- x + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:16 | 'onclick="' + x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:16 | 'onclick="' + x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:16 | 'onclick="' + x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:16 | 'onclick="' + x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:16 | 'onclick="' + x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:22 | 'onclic ... x + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:22 | 'onclic ... x + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:22 | 'onclic ... x + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:22 | 'onclic ... x + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:2:283:22 | 'onclic ... x + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:16:283:16 | x | stringConcatenatedWith | 'onclick="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:283:20:283:22 | '"' | stringConcatenatedWith | 'onclick="' + x -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:2 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:2 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:2 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:2 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:2 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x = x.r ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x = x.r ... quot;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x = x.r ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x = x.r ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:2:284:30 | x = x.r ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:6 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:6 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:6 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:6 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:6 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:14 | x.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:14 | x.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:14 | x.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:14 | x.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:14 | x.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | exceptional return of x.repla ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | exceptional return of x.repla ... quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | exceptional return of x.repla ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | exceptional return of x.repla ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | exceptional return of x.repla ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | x.repla ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | x.repla ... quot;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | x.repla ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | x.repla ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:6:284:30 | x.repla ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:8:284:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:8:284:14 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:8:284:14 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:8:284:14 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:8:284:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:16:284:19 | /"/g | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | CalleeFlexibleAccessPath | x.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:284:22:284:29 | '&quot;' | receiverName | x |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:12 | 'onclick="' | stringConcatenatedWith |  -endpoint- x + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:16 | 'onclick="' + x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:16 | 'onclick="' + x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:16 | 'onclick="' + x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:16 | 'onclick="' + x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:16 | 'onclick="' + x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:22 | 'onclic ... x + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:22 | 'onclic ... x + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:22 | 'onclic ... x + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:22 | 'onclic ... x + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:2:285:22 | 'onclic ... x + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:16:285:16 | x | stringConcatenatedWith | 'onclick="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:285:20:285:22 | '"' | stringConcatenatedWith | 'onclick="' + x -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:287:6:287:6 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:288:6:288:20 | escapeAmpersand | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:288:6:288:20 | escapeAmpersand | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:288:6:288:20 | escapeAmpersand | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:288:6:288:20 | escapeAmpersand | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:288:6:288:20 | escapeAmpersand | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:3 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:3 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:3 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:3 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:3 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y = y.r ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y = y.r ... &amp;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y = y.r ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y = y.r ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:3:289:30 | y = y.r ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:7 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:7 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:7 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:7 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:7 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:15 | y.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:15 | y.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:15 | y.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:15 | y.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:15 | y.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | exceptional return of y.repla ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | exceptional return of y.repla ... &amp;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | exceptional return of y.repla ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | exceptional return of y.repla ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | exceptional return of y.repla ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | y.repla ... &amp;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | y.repla ... &amp;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | y.repla ... &amp;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | y.repla ... &amp;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:7:289:30 | y.repla ... &amp;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:9:289:15 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:9:289:15 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:9:289:15 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:9:289:15 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:9:289:15 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:17:289:20 | /&/g | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:289:23:289:29 | '&amp;' | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:2 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y = y.r ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y = y.r ... '&gt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y = y.r ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y = y.r ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:2:291:50 | y = y.r ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:6 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:6 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:6 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:6 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:6 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:14 | y.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:14 | y.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:14 | y.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:14 | y.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:14 | y.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | exceptional return of y.repla ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | exceptional return of y.repla ... '&lt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | exceptional return of y.repla ... '&lt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | exceptional return of y.repla ... '&lt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | exceptional return of y.repla ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | y.repla ... '&lt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | y.repla ... '&lt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | y.repla ... '&lt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | y.repla ... '&lt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:28 | y.repla ... '&lt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:36 | y.repla ... replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:36 | y.repla ... replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:36 | y.repla ... replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:36 | y.repla ... replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:36 | y.repla ... replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | exceptional return of y.repla ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | exceptional return of y.repla ... '&gt;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | exceptional return of y.repla ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | exceptional return of y.repla ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | exceptional return of y.repla ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | y.repla ... '&gt;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | y.repla ... '&gt;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | y.repla ... '&gt;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | y.repla ... '&gt;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:6:291:50 | y.repla ... '&gt;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:8:291:14 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:8:291:14 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:8:291:14 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:8:291:14 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:8:291:14 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:16:291:19 | /</g | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:22:291:27 | '&lt;' | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:30:291:36 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:30:291:36 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:30:291:36 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:30:291:36 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:30:291:36 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | CalleeFlexibleAccessPath | y.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:38:291:41 | />/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | CalleeFlexibleAccessPath | y.replace().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:291:44:291:49 | '&gt;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:12 | 'onclick="' | stringConcatenatedWith |  -endpoint- y + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:16 | 'onclick="' + y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:16 | 'onclick="' + y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:16 | 'onclick="' + y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:16 | 'onclick="' + y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:16 | 'onclick="' + y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:22 | 'onclic ... y + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:22 | 'onclic ... y + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:22 | 'onclic ... y + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:22 | 'onclic ... y + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:2:292:22 | 'onclic ... y + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:16:292:16 | y | stringConcatenatedWith | 'onclick="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:292:20:292:22 | '"' | stringConcatenatedWith | 'onclick="' + y -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:293:6:293:17 | escapeQuotes | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:293:6:293:17 | escapeQuotes | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:293:6:293:17 | escapeQuotes | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:293:6:293:17 | escapeQuotes | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:293:6:293:17 | escapeQuotes | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:3 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:3 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:3 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:3 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:3 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y = y.r ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y = y.r ... quot;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y = y.r ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y = y.r ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:3:294:31 | y = y.r ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:7 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:7 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:7 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:7 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:7 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:15 | y.replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:15 | y.replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:15 | y.replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:15 | y.replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:15 | y.replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | exceptional return of y.repla ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | exceptional return of y.repla ... quot;') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | exceptional return of y.repla ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | exceptional return of y.repla ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | exceptional return of y.repla ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | y.repla ... quot;') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | y.repla ... quot;') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | y.repla ... quot;') | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | y.repla ... quot;') | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:7:294:31 | y.repla ... quot;') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:9:294:15 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:9:294:15 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:9:294:15 | replace | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:9:294:15 | replace | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:9:294:15 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:17:294:20 | /"/g | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | CalleeFlexibleAccessPath | y.replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | calleeImports |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:294:23:294:30 | '&quot;' | receiverName | y |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:2 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:2 | y | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:2 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:2 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:2 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:12 | 'onclick="' | stringConcatenatedWith |  -endpoint- y + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:16 | 'onclick="' + y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:16 | 'onclick="' + y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:16 | 'onclick="' + y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:16 | 'onclick="' + y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:16 | 'onclick="' + y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:22 | 'onclic ... y + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:22 | 'onclic ... y + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:22 | 'onclic ... y + '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:22 | 'onclic ... y + '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:2:296:22 | 'onclic ... y + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:16:296:16 | y | stringConcatenatedWith | 'onclick="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | enclosingFunctionBody | <a noise onclick="javascript:document.foo.bar(' s replace /[<>"]/g  '); return false;"> =" s replace /[<>]/g  replace /[^\\w ]+/g  " =" encodeURIComponent s replace /[<>]/g  " arr s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  =" arr join   " arr2 s val trim replace /^,\|,$/g  replace /^;\|;$/g  replace /<\|>/g  arr2 arr2 replace /"/g  =" arr2 join   " x x x replace /&/g &amp; x x replace /</g &lt; replace />/g &gt; onclick=" x " x x replace /"/g &quot; onclick=" x " y escapeAmpersand y y replace /&/g &amp; y y replace /</g &lt; replace />/g &gt; onclick=" y " escapeQuotes y y replace /"/g &quot; onclick=" y " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | enclosingFunctionName | moreIncompleteHtmlAttributeSanitization |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:296:20:296:22 | '"' | stringConcatenatedWith | 'onclick="' + y -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:299:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:299:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:299:0 | this | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:299:0 | this | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:299:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | 'arguments' object of function incompleteHtmlAttributeSanitization2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | 'arguments' object of function incompleteHtmlAttributeSanitization2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | 'arguments' object of function incompleteHtmlAttributeSanitization2 | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | 'arguments' object of function incompleteHtmlAttributeSanitization2 | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | 'arguments' object of function incompleteHtmlAttributeSanitization2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | exceptional return of function incompleteHtmlAttributeSanitization2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | exceptional return of function incompleteHtmlAttributeSanitization2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | exceptional return of function incompleteHtmlAttributeSanitization2 | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | exceptional return of function incompleteHtmlAttributeSanitization2 | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | exceptional return of function incompleteHtmlAttributeSanitization2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | functio ... // OK\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | functio ... // OK\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | functio ... // OK\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | return of function incompleteHtmlAttributeSanitization2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | return of function incompleteHtmlAttributeSanitization2 | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | return of function incompleteHtmlAttributeSanitization2 | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | return of function incompleteHtmlAttributeSanitization2 | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:1:306:1 | return of function incompleteHtmlAttributeSanitization2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:10:299:45 | incompl ... zation2 | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:10:299:45 | incompl ... zation2 | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:299:10:299:45 | incompl ... zation2 | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:33 | '=\\'' + ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:33 | '=\\'' + ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:33 | '=\\'' + ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:33 | '=\\'' + ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:33 | '=\\'' + ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:40 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:40 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:40 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:40 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:2:300:40 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:10 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:10 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:20 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:10:300:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:14:300:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:14:300:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:14:300:20 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:14:300:20 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:14:300:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:22:300:29 | /[&<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:31:300:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:300:37:300:40 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:32 | '=\\'' + ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:32 | '=\\'' + ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:32 | '=\\'' + ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:32 | '=\\'' + ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:32 | '=\\'' + ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:39 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:39 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:39 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:39 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:2:301:39 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:10 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:10 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:20 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:10:301:32 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:14:301:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:14:301:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:14:301:20 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:14:301:20 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:14:301:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:22:301:28 | /[<>]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:30:301:31 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:301:36:301:39 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:34 | '=\\'' + ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:34 | '=\\'' + ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:34 | '=\\'' + ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:34 | '=\\'' + ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:34 | '=\\'' + ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:41 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:41 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:41 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:41 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:2:302:41 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:10 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:10 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:20 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:10:302:34 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:14:302:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:14:302:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:14:302:20 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:14:302:20 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:14:302:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:22:302:30 | /[&<>"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:32:302:33 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:302:38:302:41 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:34 | '=\\'' + ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:34 | '=\\'' + ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:34 | '=\\'' + ... /g, '') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:34 | '=\\'' + ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:34 | '=\\'' + ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:41 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:41 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:41 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:41 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:2:303:41 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:10 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:10 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:20 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | exceptional return of s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | exceptional return of s().rep ... /g, '') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | exceptional return of s().rep ... /g, '') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | exceptional return of s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | exceptional return of s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:10:303:34 | s().rep ... /g, '') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:14:303:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:14:303:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:14:303:20 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:14:303:20 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:14:303:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:22:303:29 | /[<>&]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:32:303:33 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:303:38:303:41 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:33 | '="' +  ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:33 | '="' +  ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:33 | '="' +  ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:33 | '="' +  ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:33 | '="' +  ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:39 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:39 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:39 | '="' +  ... ) + '"' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:39 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:2:304:39 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:9 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:9 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:19 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:19 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:9:304:33 | s().rep ... ]/g,'') | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:13:304:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:13:304:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:13:304:19 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:13:304:19 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:13:304:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:21:304:29 | /[<>&"]/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:31:304:32 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:304:37:304:39 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:34 | '=\\'' + ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:34 | '=\\'' + ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:34 | '=\\'' + ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:34 | '=\\'' + ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:34 | '=\\'' + ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:41 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:41 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:41 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:41 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:2:305:41 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:10 | s | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:10 | s | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | exceptional return of s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | s() | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | s() | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:20 | s().replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | exceptional return of s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | exceptional return of s().rep ... ]/g,'') | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | exceptional return of s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | exceptional return of s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:10:305:34 | s().rep ... ]/g,'') | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:14:305:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:14:305:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:14:305:20 | replace | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:14:305:20 | replace | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:14:305:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:22:305:30 | /[<>&']/g | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:32:305:33 | '' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | enclosingFunctionBody | =' s replace /[&<>]/g  ' =' s replace /[<>]/g  ' =' s replace /[&<>"]/g  ' =' s replace /[<>&]/g  ' =" s replace /[<>&"]/g  " =' s replace /[<>&']/g  ' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | enclosingFunctionName | incompleteHtmlAttributeSanitization2 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:305:38:305:41 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:308:0 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:308:0 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:308:0 | this | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:308:0 | this | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:308:0 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | 'arguments' object of function incompleteComplexSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | 'arguments' object of function incompleteComplexSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | 'arguments' object of function incompleteComplexSanitizers | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | 'arguments' object of function incompleteComplexSanitizers | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | 'arguments' object of function incompleteComplexSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | exceptional return of function incompleteComplexSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | exceptional return of function incompleteComplexSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | exceptional return of function incompleteComplexSanitizers | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | exceptional return of function incompleteComplexSanitizers | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | exceptional return of function incompleteComplexSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | functio ...  '"';\\n} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | functio ...  '"';\\n} | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | functio ...  '"';\\n} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | return of function incompleteComplexSanitizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | return of function incompleteComplexSanitizers | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | return of function incompleteComplexSanitizers | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | return of function incompleteComplexSanitizers | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:1:330:1 | return of function incompleteComplexSanitizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:10:308:36 | incompl ... itizers | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:10:308:36 | incompl ... itizers | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:308:10:308:36 | incompl ... itizers | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:309:6 | '=\\'' | stringConcatenatedWith |  -endpoint- s().replace() + ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:3 | '=\\'' + ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:3 | '=\\'' + ... ;";\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:3 | '=\\'' + ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:3 | '=\\'' + ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:3 | '=\\'' + ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:10 | '=\\'' + ...  + '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:10 | '=\\'' + ...  + '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:10 | '=\\'' + ...  + '\\'' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:10 | '=\\'' + ...  + '\\'' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:2:318:10 | '=\\'' + ...  + '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:10 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:10 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:10 | s | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:10 | s | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:10 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | exceptional return of s() | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | s() | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | s() | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:12 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:20 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:20 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:20 | s().replace | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:20 | s().replace | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:309:20 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | exceptional return of s().rep ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | exceptional return of s().rep ... ;";\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | exceptional return of s().rep ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | exceptional return of s().rep ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | exceptional return of s().rep ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | stringConcatenatedWith | '='' -endpoint- ''' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:14:309:20 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:14:309:20 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:14:309:20 | replace | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:14:309:20 | replace | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:14:309:20 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:22:309:31 | /[&<>"]/gm | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:309:33 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:309:33 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:309:33 | this | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:309:33 | this | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:309:33 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | 'arguments' object of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | 'arguments' object of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | exceptional return of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | exceptional return of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | functio ... t;";\\n\\t} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | return of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | return of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:34:318:2 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:309:44:309:46 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str === "&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str === "&" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str === "&" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str === "&" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:7:310:17 | str === "&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:15:310:17 | "&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:15:310:17 | "&" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:15:310:17 | "&" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:15:310:17 | "&" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:310:15:310:17 | "&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:311:11:311:17 | "&amp;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:311:11:311:17 | "&amp;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:311:11:311:17 | "&amp;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:311:11:311:17 | "&amp;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:311:11:311:17 | "&amp;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str === "<" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str === "<" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str === "<" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str === "<" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:7:312:17 | str === "<" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:15:312:17 | "<" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:15:312:17 | "<" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:15:312:17 | "<" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:15:312:17 | "<" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:312:15:312:17 | "<" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:313:11:313:16 | "&lt;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:313:11:313:16 | "&lt;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:313:11:313:16 | "&lt;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:313:11:313:16 | "&lt;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:313:11:313:16 | "&lt;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str === ">" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str === ">" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str === ">" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str === ">" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:7:314:17 | str === ">" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:15:314:17 | ">" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:15:314:17 | ">" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:15:314:17 | ">" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:15:314:17 | ">" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:314:15:314:17 | ">" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:315:11:315:16 | "&gt;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:315:11:315:16 | "&gt;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:315:11:315:16 | "&gt;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:315:11:315:16 | "&gt;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:315:11:315:16 | "&gt;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:18 | str === "\\"" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:18 | str === "\\"" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:18 | str === "\\"" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:18 | str === "\\"" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:7:316:18 | str === "\\"" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:15:316:18 | "\\"" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:15:316:18 | "\\"" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:15:316:18 | "\\"" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:15:316:18 | "\\"" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:316:15:316:18 | "\\"" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:317:11:317:18 | "&quot;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:317:11:317:18 | "&quot;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:317:11:317:18 | "&quot;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:317:11:317:18 | "&quot;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:317:11:317:18 | "&quot;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:318:7:318:10 | '\\'' | stringConcatenatedWith | '='' + s().replace() -endpoint-  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:320:5 | '="' | stringConcatenatedWith |  -endpoint- s().replace() + '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:3 | '="' +  ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:3 | '="' +  ... ;";\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:3 | '="' +  ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:3 | '="' +  ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:3 | '="' +  ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:9 | '="' +  ... ) + '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:9 | '="' +  ... ) + '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:9 | '="' +  ... ) + '"' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:9 | '="' +  ... ) + '"' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:2:329:9 | '="' +  ... ) + '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:9 | s | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:9 | s | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:9 | s | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:9 | s | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:9 | s | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | exceptional return of s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | exceptional return of s() | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | exceptional return of s() | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | exceptional return of s() | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | exceptional return of s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | s() | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | s() | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | s() | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | s() | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:11 | s() | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:19 | s().replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:19 | s().replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:19 | s().replace | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:19 | s().replace | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:320:19 | s().replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | exceptional return of s().rep ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | exceptional return of s().rep ... ;";\\n\\t}) | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | exceptional return of s().rep ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | exceptional return of s().rep ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | exceptional return of s().rep ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:9:329:3 | s().rep ... ;";\\n\\t}) | stringConcatenatedWith | '="' -endpoint- '"' |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:13:320:19 | replace | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:13:320:19 | replace | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:13:320:19 | replace | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:13:320:19 | replace | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:13:320:19 | replace | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:21:320:30 | /[&<>"]/gm | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:320:32 | this | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:320:32 | this | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:320:32 | this | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:320:32 | this | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:320:32 | this | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | 'arguments' object of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | 'arguments' object of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | 'arguments' object of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | 'arguments' object of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | exceptional return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | exceptional return of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | exceptional return of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | exceptional return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | CalleeFlexibleAccessPath | s().replace |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | functio ... t;";\\n\\t} | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | return of anonymous function | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | return of anonymous function | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | return of anonymous function | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | return of anonymous function | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:33:329:2 | return of anonymous function | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:320:43:320:45 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str === "&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str === "&" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str === "&" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str === "&" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:7:321:17 | str === "&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:15:321:17 | "&" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:15:321:17 | "&" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:15:321:17 | "&" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:15:321:17 | "&" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:321:15:321:17 | "&" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:322:11:322:17 | "&amp;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:322:11:322:17 | "&amp;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:322:11:322:17 | "&amp;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:322:11:322:17 | "&amp;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:322:11:322:17 | "&amp;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str === "<" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str === "<" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str === "<" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str === "<" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:7:323:17 | str === "<" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:15:323:17 | "<" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:15:323:17 | "<" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:15:323:17 | "<" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:15:323:17 | "<" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:323:15:323:17 | "<" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:324:11:324:16 | "&lt;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:324:11:324:16 | "&lt;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:324:11:324:16 | "&lt;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:324:11:324:16 | "&lt;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:324:11:324:16 | "&lt;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str | contextSurroundingFunctionParameters |  |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str === ">" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str === ">" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str === ">" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str === ">" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:7:325:17 | str === ">" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:15:325:17 | ">" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:15:325:17 | ">" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:15:325:17 | ">" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:15:325:17 | ">" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:325:15:325:17 | ">" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:326:11:326:16 | "&gt;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:326:11:326:16 | "&gt;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:326:11:326:16 | "&gt;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:326:11:326:16 | "&gt;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:326:11:326:16 | "&gt;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:9 | str | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:9 | str | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:9 | str | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:9 | str | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:9 | str | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:18 | str === "\\"" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:18 | str === "\\"" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:18 | str === "\\"" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:18 | str === "\\"" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:7:327:18 | str === "\\"" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:15:327:18 | "\\"" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:15:327:18 | "\\"" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:15:327:18 | "\\"" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:15:327:18 | "\\"" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:327:15:327:18 | "\\"" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:328:11:328:18 | "&quot;" | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:328:11:328:18 | "&quot;" | contextSurroundingFunctionParameters | ()\n(str) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:328:11:328:18 | "&quot;" | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:328:11:328:18 | "&quot;" | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:328:11:328:18 | "&quot;" | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | contextFunctionInterfaces | attr_str(a)\nbad1(s)\nbad10(s)\nbad11(s)\nbad12(s)\nbad13(s)\nbad14(s)\nbad15(s)\nbad16(s)\nbad17(s)\nbad18(p)\nbad2(s)\nbad3(s)\nbad4(s)\nbad5(s)\nbad6(s)\nbad7(s)\nbad8(s)\nbad9(s)\nescapeHTML(value)\nflowifyComments(s)\ngood1(s)\ngood10(s)\ngood11(s)\ngood12(s)\ngood2(s)\ngood3(s)\ngood4(s)\ngood5(s)\ngood6(s)\ngood7(s)\ngood8(s)\ngood9(s)\nincompleteComplexSanitizers()\nincompleteHtmlAttributeSanitization()\nincompleteHtmlAttributeSanitization2()\nmoreIncompleteHtmlAttributeSanitization()\nmultiStepSanitization()\nnewlines(s)\ntypicalBadHtmlSanitizers(s) |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | contextSurroundingFunctionParameters | () |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | enclosingFunctionBody | =' s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; ' =" s replace /[&<>"]/gm str str & &amp; str < &lt; str > &gt; str " &quot; " |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | enclosingFunctionName | incompleteComplexSanitizers |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | fileImports | child_process express |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:329:7:329:9 | '"' | stringConcatenatedWith | '="' + s().replace() -endpoint-  |
| file://:0:0:0:0 | global access path | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| file://:0:0:0:0 | this | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| file://:0:0:0:0 | this | contextFunctionInterfaces | find(query)\nfind(query)\nfind(query) |
| file://:0:0:0:0 | this | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| file://:0:0:0:0 | this | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| file://:0:0:0:0 | this | contextFunctionInterfaces | getCollection()\ngetMongooseModel()\ngetMongooseQuery() |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | contextSurroundingFunctionParameters |  |
| file://:0:0:0:0 | this | fileImports |  |
| file://:0:0:0:0 | this | fileImports |  |
| file://:0:0:0:0 | this | fileImports |  |
| file://:0:0:0:0 | this | fileImports | body-parser express mongodb mongoose |
| file://:0:0:0:0 | this | fileImports | body-parser express mongodb mongoose |
| file://:0:0:0:0 | this | fileImports | body-parser express mongodb mongoose |
| index.js:1:1:1:0 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:0 | this | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:0 | this | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | User | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | User | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | User | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | _ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | _ | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | _ | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | cp | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | cp | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | cp | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | fs | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | fs | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | fs | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | ready | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | ready | fileImports | child_process fs mongoose underscore |
| index.js:1:1:1:1 | require | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:1:1:1 | require | contextSurroundingFunctionParameters |  |
| index.js:1:1:1:1 | require | fileImports | child_process fs mongoose underscore |
| index.js:1:7:1:8 | fs | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:7:1:8 | fs | contextSurroundingFunctionParameters |  |
| index.js:1:7:1:8 | fs | contextSurroundingFunctionParameters |  |
| index.js:1:7:1:8 | fs | fileImports | child_process fs mongoose underscore |
| index.js:1:7:1:24 | fs | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:7:1:24 | fs | contextSurroundingFunctionParameters |  |
| index.js:1:7:1:24 | fs | fileImports | child_process fs mongoose underscore |
| index.js:1:7:1:24 | fs = require("fs") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:7:1:24 | fs = require("fs") | contextSurroundingFunctionParameters |  |
| index.js:1:7:1:24 | fs = require("fs") | fileImports | child_process fs mongoose underscore |
| index.js:1:12:1:18 | require | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:12:1:18 | require | contextSurroundingFunctionParameters |  |
| index.js:1:12:1:18 | require | fileImports | child_process fs mongoose underscore |
| index.js:1:12:1:24 | exceptional return of require("fs") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:12:1:24 | exceptional return of require("fs") | contextSurroundingFunctionParameters |  |
| index.js:1:12:1:24 | exceptional return of require("fs") | fileImports | child_process fs mongoose underscore |
| index.js:1:12:1:24 | require("fs") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:12:1:24 | require("fs") | contextSurroundingFunctionParameters |  |
| index.js:1:12:1:24 | require("fs") | fileImports | child_process fs mongoose underscore |
| index.js:1:20:1:23 | "fs" | CalleeFlexibleAccessPath | require |
| index.js:1:20:1:23 | "fs" | InputArgumentIndex | 0 |
| index.js:1:20:1:23 | "fs" | calleeImports |  |
| index.js:1:20:1:23 | "fs" | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:1:20:1:23 | "fs" | contextSurroundingFunctionParameters |  |
| index.js:1:20:1:23 | "fs" | fileImports | child_process fs mongoose underscore |
| index.js:2:1:14:2 | (functi ... .c);\\n}) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:1:14:2 | (functi ... .c);\\n}) | contextSurroundingFunctionParameters |  |
| index.js:2:1:14:2 | (functi ... .c);\\n}) | fileImports | child_process fs mongoose underscore |
| index.js:2:2:2:1 | fs | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:2:1 | fs | contextSurroundingFunctionParameters |  |
| index.js:2:2:2:1 | fs | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:2:2:2:1 | fs | enclosingFunctionName |  |
| index.js:2:2:2:1 | fs | fileImports | child_process fs mongoose underscore |
| index.js:2:2:2:1 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:2:1 | this | contextSurroundingFunctionParameters |  |
| index.js:2:2:2:1 | this | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:2:2:2:1 | this | enclosingFunctionName |  |
| index.js:2:2:2:1 | this | fileImports | child_process fs mongoose underscore |
| index.js:2:2:14:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:14:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:2:2:14:1 | 'arguments' object of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:2:2:14:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| index.js:2:2:14:1 | 'arguments' object of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:2:2:14:1 | exceptional return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:14:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:2:2:14:1 | exceptional return of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:2:2:14:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| index.js:2:2:14:1 | exceptional return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:2:2:14:1 | functio ... b.c);\\n} | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:14:1 | functio ... b.c);\\n} | contextSurroundingFunctionParameters | () |
| index.js:2:2:14:1 | functio ... b.c);\\n} | fileImports | child_process fs mongoose underscore |
| index.js:2:2:14:1 | return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:2:2:14:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:2:2:14:1 | return of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:2:2:14:1 | return of anonymous function | enclosingFunctionName |  |
| index.js:2:2:14:1 | return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:3:3:3:9 | unknown | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:3:3:3:9 | unknown | contextSurroundingFunctionParameters | () |
| index.js:3:3:3:9 | unknown | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:3:3:3:9 | unknown | enclosingFunctionName |  |
| index.js:3:3:3:9 | unknown | fileImports | child_process fs mongoose underscore |
| index.js:3:3:3:11 | exceptional return of unknown() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:3:3:3:11 | exceptional return of unknown() | contextSurroundingFunctionParameters |  |
| index.js:3:3:3:11 | exceptional return of unknown() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:3:3:3:11 | exceptional return of unknown() | enclosingFunctionName |  |
| index.js:3:3:3:11 | exceptional return of unknown() | fileImports | child_process fs mongoose underscore |
| index.js:3:3:3:11 | unknown() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:3:3:3:11 | unknown() | contextSurroundingFunctionParameters | () |
| index.js:3:3:3:11 | unknown() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:3:3:3:11 | unknown() | enclosingFunctionName |  |
| index.js:3:3:3:11 | unknown() | fileImports | child_process fs mongoose underscore |
| index.js:4:3:4:10 | toString | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:4:3:4:10 | toString | contextSurroundingFunctionParameters | () |
| index.js:4:3:4:10 | toString | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:4:3:4:10 | toString | enclosingFunctionName |  |
| index.js:4:3:4:10 | toString | fileImports | child_process fs mongoose underscore |
| index.js:4:3:4:12 | exceptional return of toString() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:4:3:4:12 | exceptional return of toString() | contextSurroundingFunctionParameters |  |
| index.js:4:3:4:12 | exceptional return of toString() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:4:3:4:12 | exceptional return of toString() | enclosingFunctionName |  |
| index.js:4:3:4:12 | exceptional return of toString() | fileImports | child_process fs mongoose underscore |
| index.js:4:3:4:12 | toString() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:4:3:4:12 | toString() | contextSurroundingFunctionParameters | () |
| index.js:4:3:4:12 | toString() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:4:3:4:12 | toString() | enclosingFunctionName |  |
| index.js:4:3:4:12 | toString() | fileImports | child_process fs mongoose underscore |
| index.js:5:3:5:4 | fs | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:5:3:5:4 | fs | contextSurroundingFunctionParameters | () |
| index.js:5:3:5:4 | fs | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:5:3:5:4 | fs | enclosingFunctionName |  |
| index.js:5:3:5:4 | fs | fileImports | child_process fs mongoose underscore |
| index.js:5:3:5:13 | fs.readFile | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:5:3:5:13 | fs.readFile | contextSurroundingFunctionParameters | () |
| index.js:5:3:5:13 | fs.readFile | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:5:3:5:13 | fs.readFile | enclosingFunctionName |  |
| index.js:5:3:5:13 | fs.readFile | fileImports | child_process fs mongoose underscore |
| index.js:5:3:5:15 | exceptional return of fs.readFile() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:5:3:5:15 | exceptional return of fs.readFile() | contextSurroundingFunctionParameters |  |
| index.js:5:3:5:15 | exceptional return of fs.readFile() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:5:3:5:15 | exceptional return of fs.readFile() | enclosingFunctionName |  |
| index.js:5:3:5:15 | exceptional return of fs.readFile() | fileImports | child_process fs mongoose underscore |
| index.js:5:3:5:15 | fs.readFile() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:5:3:5:15 | fs.readFile() | contextSurroundingFunctionParameters | () |
| index.js:5:3:5:15 | fs.readFile() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:5:3:5:15 | fs.readFile() | enclosingFunctionName |  |
| index.js:5:3:5:15 | fs.readFile() | fileImports | child_process fs mongoose underscore |
| index.js:5:6:5:13 | readFile | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:5:6:5:13 | readFile | contextSurroundingFunctionParameters | () |
| index.js:5:6:5:13 | readFile | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:5:6:5:13 | readFile | enclosingFunctionName |  |
| index.js:5:6:5:13 | readFile | fileImports | child_process fs mongoose underscore |
| index.js:7:3:7:2 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:3:7:2 | this | contextSurroundingFunctionParameters |  |
| index.js:7:3:7:2 | this | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:3:7:2 | this | enclosingFunctionName |  |
| index.js:7:3:7:2 | this | fileImports | child_process fs mongoose underscore |
| index.js:7:3:9:3 | 'arguments' object of function withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:3:9:3 | 'arguments' object of function withCallback | contextSurroundingFunctionParameters |  |
| index.js:7:3:9:3 | 'arguments' object of function withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:3:9:3 | 'arguments' object of function withCallback | enclosingFunctionName |  |
| index.js:7:3:9:3 | 'arguments' object of function withCallback | fileImports | child_process fs mongoose underscore |
| index.js:7:3:9:3 | exceptional return of function withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:3:9:3 | exceptional return of function withCallback | contextSurroundingFunctionParameters |  |
| index.js:7:3:9:3 | exceptional return of function withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:3:9:3 | exceptional return of function withCallback | enclosingFunctionName |  |
| index.js:7:3:9:3 | exceptional return of function withCallback | fileImports | child_process fs mongoose underscore |
| index.js:7:3:9:3 | functio ... ();\\n  } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:3:9:3 | functio ... ();\\n  } | contextSurroundingFunctionParameters |  |
| index.js:7:3:9:3 | functio ... ();\\n  } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:3:9:3 | functio ... ();\\n  } | enclosingFunctionName |  |
| index.js:7:3:9:3 | functio ... ();\\n  } | fileImports | child_process fs mongoose underscore |
| index.js:7:3:9:3 | return of function withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:3:9:3 | return of function withCallback | contextSurroundingFunctionParameters |  |
| index.js:7:3:9:3 | return of function withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:3:9:3 | return of function withCallback | enclosingFunctionName |  |
| index.js:7:3:9:3 | return of function withCallback | fileImports | child_process fs mongoose underscore |
| index.js:7:12:7:23 | withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:12:7:23 | withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:12:7:23 | withCallback | contextSurroundingFunctionParameters |  |
| index.js:7:12:7:23 | withCallback | contextSurroundingFunctionParameters | (cb) |
| index.js:7:12:7:23 | withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:12:7:23 | withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:12:7:23 | withCallback | enclosingFunctionName |  |
| index.js:7:12:7:23 | withCallback | enclosingFunctionName |  |
| index.js:7:12:7:23 | withCallback | fileImports | child_process fs mongoose underscore |
| index.js:7:12:7:23 | withCallback | fileImports | child_process fs mongoose underscore |
| index.js:7:25:7:26 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:25:7:26 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:7:25:7:26 | cb | contextSurroundingFunctionParameters |  |
| index.js:7:25:7:26 | cb | contextSurroundingFunctionParameters | (cb) |
| index.js:7:25:7:26 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:25:7:26 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:7:25:7:26 | cb | enclosingFunctionName |  |
| index.js:7:25:7:26 | cb | enclosingFunctionName |  |
| index.js:7:25:7:26 | cb | fileImports | child_process fs mongoose underscore |
| index.js:7:25:7:26 | cb | fileImports | child_process fs mongoose underscore |
| index.js:8:5:8:6 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:8:5:8:6 | cb | contextSurroundingFunctionParameters | (cb) |
| index.js:8:5:8:6 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:8:5:8:6 | cb | enclosingFunctionName |  |
| index.js:8:5:8:6 | cb | fileImports | child_process fs mongoose underscore |
| index.js:8:5:8:8 | cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:8:5:8:8 | cb() | contextSurroundingFunctionParameters | (cb) |
| index.js:8:5:8:8 | cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:8:5:8:8 | cb() | enclosingFunctionName |  |
| index.js:8:5:8:8 | cb() | fileImports | child_process fs mongoose underscore |
| index.js:8:5:8:8 | exceptional return of cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:8:5:8:8 | exceptional return of cb() | contextSurroundingFunctionParameters |  |
| index.js:8:5:8:8 | exceptional return of cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:8:5:8:8 | exceptional return of cb() | enclosingFunctionName |  |
| index.js:8:5:8:8 | exceptional return of cb() | fileImports | child_process fs mongoose underscore |
| index.js:10:3:10:14 | withCallback | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:3:10:14 | withCallback | contextSurroundingFunctionParameters | () |
| index.js:10:3:10:14 | withCallback | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:3:10:14 | withCallback | enclosingFunctionName |  |
| index.js:10:3:10:14 | withCallback | fileImports | child_process fs mongoose underscore |
| index.js:10:3:10:24 | exceptional return of withCal ...  => 42) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:3:10:24 | exceptional return of withCal ...  => 42) | contextSurroundingFunctionParameters |  |
| index.js:10:3:10:24 | exceptional return of withCal ...  => 42) | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:3:10:24 | exceptional return of withCal ...  => 42) | enclosingFunctionName |  |
| index.js:10:3:10:24 | exceptional return of withCal ...  => 42) | fileImports | child_process fs mongoose underscore |
| index.js:10:3:10:24 | withCal ...  => 42) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:3:10:24 | withCal ...  => 42) | contextSurroundingFunctionParameters | () |
| index.js:10:3:10:24 | withCal ...  => 42) | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:3:10:24 | withCal ...  => 42) | enclosingFunctionName |  |
| index.js:10:3:10:24 | withCal ...  => 42) | fileImports | child_process fs mongoose underscore |
| index.js:10:16:10:23 | 'arguments' object of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:16:10:23 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:10:16:10:23 | 'arguments' object of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:16:10:23 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| index.js:10:16:10:23 | 'arguments' object of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:10:16:10:23 | () => 42 | CalleeFlexibleAccessPath | withCallback |
| index.js:10:16:10:23 | () => 42 | InputArgumentIndex | 0 |
| index.js:10:16:10:23 | () => 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:16:10:23 | () => 42 | contextSurroundingFunctionParameters | ()\n() |
| index.js:10:16:10:23 | () => 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:16:10:23 | () => 42 | enclosingFunctionName |  |
| index.js:10:16:10:23 | () => 42 | fileImports | child_process fs mongoose underscore |
| index.js:10:16:10:23 | exceptional return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:16:10:23 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:10:16:10:23 | exceptional return of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:16:10:23 | exceptional return of anonymous function | enclosingFunctionName |  |
| index.js:10:16:10:23 | exceptional return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:10:16:10:23 | return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:16:10:23 | return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:10:16:10:23 | return of anonymous function | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:16:10:23 | return of anonymous function | enclosingFunctionName |  |
| index.js:10:16:10:23 | return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:10:22:10:23 | 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:10:22:10:23 | 42 | contextSurroundingFunctionParameters | ()\n() |
| index.js:10:22:10:23 | 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:10:22:10:23 | 42 | enclosingFunctionName |  |
| index.js:10:22:10:23 | 42 | fileImports | child_process fs mongoose underscore |
| index.js:12:7:12:9 | obj | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:7:12:9 | obj | contextSurroundingFunctionParameters | () |
| index.js:12:7:12:9 | obj | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:7:12:9 | obj | enclosingFunctionName |  |
| index.js:12:7:12:9 | obj | fileImports | child_process fs mongoose underscore |
| index.js:12:7:12:56 | obj | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:7:12:56 | obj | contextSurroundingFunctionParameters |  |
| index.js:12:7:12:56 | obj | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:7:12:56 | obj | enclosingFunctionName |  |
| index.js:12:7:12:56 | obj | fileImports | child_process fs mongoose underscore |
| index.js:12:7:12:56 | obj = { ...  cb() } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:7:12:56 | obj = { ...  cb() } | contextSurroundingFunctionParameters | () |
| index.js:12:7:12:56 | obj = { ...  cb() } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:7:12:56 | obj = { ...  cb() } | enclosingFunctionName |  |
| index.js:12:7:12:56 | obj = { ...  cb() } | fileImports | child_process fs mongoose underscore |
| index.js:12:13:12:56 | { a: {  ...  cb() } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:13:12:56 | { a: {  ...  cb() } | contextSurroundingFunctionParameters | () |
| index.js:12:13:12:56 | { a: {  ...  cb() } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:13:12:56 | { a: {  ...  cb() } | enclosingFunctionName |  |
| index.js:12:13:12:56 | { a: {  ...  cb() } | fileImports | child_process fs mongoose underscore |
| index.js:12:15:12:15 | a | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:15:12:15 | a | contextSurroundingFunctionParameters | () |
| index.js:12:15:12:15 | a | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:15:12:15 | a | enclosingFunctionName |  |
| index.js:12:15:12:15 | a | fileImports | child_process fs mongoose underscore |
| index.js:12:15:12:39 | a: { b: ...  42 } } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:15:12:39 | a: { b: ...  42 } } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:15:12:39 | a: { b: ...  42 } } | contextSurroundingFunctionParameters |  |
| index.js:12:15:12:39 | a: { b: ...  42 } } | contextSurroundingFunctionParameters |  |
| index.js:12:15:12:39 | a: { b: ...  42 } } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:15:12:39 | a: { b: ...  42 } } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:15:12:39 | a: { b: ...  42 } } | enclosingFunctionName |  |
| index.js:12:15:12:39 | a: { b: ...  42 } } | enclosingFunctionName |  |
| index.js:12:15:12:39 | a: { b: ...  42 } } | fileImports | child_process fs mongoose underscore |
| index.js:12:15:12:39 | a: { b: ...  42 } } | fileImports | child_process fs mongoose underscore |
| index.js:12:18:12:39 | { b: {  ...  42 } } | assignedToPropName | a |
| index.js:12:18:12:39 | { b: {  ...  42 } } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:18:12:39 | { b: {  ...  42 } } | contextSurroundingFunctionParameters | () |
| index.js:12:18:12:39 | { b: {  ...  42 } } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:18:12:39 | { b: {  ...  42 } } | enclosingFunctionName |  |
| index.js:12:18:12:39 | { b: {  ...  42 } } | fileImports | child_process fs mongoose underscore |
| index.js:12:20:12:20 | b | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:20:12:20 | b | contextSurroundingFunctionParameters | () |
| index.js:12:20:12:20 | b | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:20:12:20 | b | enclosingFunctionName |  |
| index.js:12:20:12:20 | b | fileImports | child_process fs mongoose underscore |
| index.js:12:20:12:37 | b: { c: () => 42 } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:20:12:37 | b: { c: () => 42 } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:20:12:37 | b: { c: () => 42 } | contextSurroundingFunctionParameters |  |
| index.js:12:20:12:37 | b: { c: () => 42 } | contextSurroundingFunctionParameters |  |
| index.js:12:20:12:37 | b: { c: () => 42 } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:20:12:37 | b: { c: () => 42 } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:20:12:37 | b: { c: () => 42 } | enclosingFunctionName |  |
| index.js:12:20:12:37 | b: { c: () => 42 } | enclosingFunctionName |  |
| index.js:12:20:12:37 | b: { c: () => 42 } | fileImports | child_process fs mongoose underscore |
| index.js:12:20:12:37 | b: { c: () => 42 } | fileImports | child_process fs mongoose underscore |
| index.js:12:23:12:37 | { c: () => 42 } | assignedToPropName | b |
| index.js:12:23:12:37 | { c: () => 42 } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:23:12:37 | { c: () => 42 } | contextSurroundingFunctionParameters | () |
| index.js:12:23:12:37 | { c: () => 42 } | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:23:12:37 | { c: () => 42 } | enclosingFunctionName |  |
| index.js:12:23:12:37 | { c: () => 42 } | fileImports | child_process fs mongoose underscore |
| index.js:12:25:12:25 | c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:25:12:25 | c | contextSurroundingFunctionParameters | () |
| index.js:12:25:12:25 | c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:25:12:25 | c | enclosingFunctionName |  |
| index.js:12:25:12:25 | c | fileImports | child_process fs mongoose underscore |
| index.js:12:25:12:35 | c: () => 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:25:12:35 | c: () => 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:25:12:35 | c: () => 42 | contextSurroundingFunctionParameters |  |
| index.js:12:25:12:35 | c: () => 42 | contextSurroundingFunctionParameters |  |
| index.js:12:25:12:35 | c: () => 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:25:12:35 | c: () => 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:25:12:35 | c: () => 42 | enclosingFunctionName |  |
| index.js:12:25:12:35 | c: () => 42 | enclosingFunctionName |  |
| index.js:12:25:12:35 | c: () => 42 | fileImports | child_process fs mongoose underscore |
| index.js:12:25:12:35 | c: () => 42 | fileImports | child_process fs mongoose underscore |
| index.js:12:28:12:35 | 'arguments' object of method c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:28:12:35 | 'arguments' object of method c | contextSurroundingFunctionParameters |  |
| index.js:12:28:12:35 | 'arguments' object of method c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:28:12:35 | 'arguments' object of method c | enclosingFunctionName |  |
| index.js:12:28:12:35 | 'arguments' object of method c | fileImports | child_process fs mongoose underscore |
| index.js:12:28:12:35 | () => 42 | assignedToPropName | c |
| index.js:12:28:12:35 | () => 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:28:12:35 | () => 42 | contextSurroundingFunctionParameters | ()\n() |
| index.js:12:28:12:35 | () => 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:28:12:35 | () => 42 | enclosingFunctionName |  |
| index.js:12:28:12:35 | () => 42 | fileImports | child_process fs mongoose underscore |
| index.js:12:28:12:35 | exceptional return of method c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:28:12:35 | exceptional return of method c | contextSurroundingFunctionParameters |  |
| index.js:12:28:12:35 | exceptional return of method c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:28:12:35 | exceptional return of method c | enclosingFunctionName |  |
| index.js:12:28:12:35 | exceptional return of method c | fileImports | child_process fs mongoose underscore |
| index.js:12:28:12:35 | return of method c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:28:12:35 | return of method c | contextSurroundingFunctionParameters |  |
| index.js:12:28:12:35 | return of method c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:28:12:35 | return of method c | enclosingFunctionName |  |
| index.js:12:28:12:35 | return of method c | fileImports | child_process fs mongoose underscore |
| index.js:12:34:12:35 | 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:34:12:35 | 42 | contextSurroundingFunctionParameters | ()\n() |
| index.js:12:34:12:35 | 42 | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:34:12:35 | 42 | enclosingFunctionName |  |
| index.js:12:34:12:35 | 42 | fileImports | child_process fs mongoose underscore |
| index.js:12:42:12:42 | f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:42:12:42 | f | contextSurroundingFunctionParameters | () |
| index.js:12:42:12:42 | f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:42:12:42 | f | enclosingFunctionName |  |
| index.js:12:42:12:42 | f | fileImports | child_process fs mongoose underscore |
| index.js:12:42:12:54 | f: cb => cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:42:12:54 | f: cb => cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:42:12:54 | f: cb => cb() | contextSurroundingFunctionParameters |  |
| index.js:12:42:12:54 | f: cb => cb() | contextSurroundingFunctionParameters |  |
| index.js:12:42:12:54 | f: cb => cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:42:12:54 | f: cb => cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:42:12:54 | f: cb => cb() | enclosingFunctionName |  |
| index.js:12:42:12:54 | f: cb => cb() | enclosingFunctionName |  |
| index.js:12:42:12:54 | f: cb => cb() | fileImports | child_process fs mongoose underscore |
| index.js:12:42:12:54 | f: cb => cb() | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:46 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:46 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:46 | cb | contextSurroundingFunctionParameters |  |
| index.js:12:45:12:46 | cb | contextSurroundingFunctionParameters | ()\n(cb) |
| index.js:12:45:12:46 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:46 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:46 | cb | enclosingFunctionName |  |
| index.js:12:45:12:46 | cb | enclosingFunctionName |  |
| index.js:12:45:12:46 | cb | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:46 | cb | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:54 | 'arguments' object of method f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:54 | 'arguments' object of method f | contextSurroundingFunctionParameters |  |
| index.js:12:45:12:54 | 'arguments' object of method f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:54 | 'arguments' object of method f | enclosingFunctionName |  |
| index.js:12:45:12:54 | 'arguments' object of method f | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:54 | cb => cb() | assignedToPropName | f |
| index.js:12:45:12:54 | cb => cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:54 | cb => cb() | contextSurroundingFunctionParameters | ()\n(cb) |
| index.js:12:45:12:54 | cb => cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:54 | cb => cb() | enclosingFunctionName |  |
| index.js:12:45:12:54 | cb => cb() | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:54 | exceptional return of method f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:54 | exceptional return of method f | contextSurroundingFunctionParameters |  |
| index.js:12:45:12:54 | exceptional return of method f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:54 | exceptional return of method f | enclosingFunctionName |  |
| index.js:12:45:12:54 | exceptional return of method f | fileImports | child_process fs mongoose underscore |
| index.js:12:45:12:54 | return of method f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:45:12:54 | return of method f | contextSurroundingFunctionParameters |  |
| index.js:12:45:12:54 | return of method f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:45:12:54 | return of method f | enclosingFunctionName |  |
| index.js:12:45:12:54 | return of method f | fileImports | child_process fs mongoose underscore |
| index.js:12:51:12:52 | cb | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:51:12:52 | cb | contextSurroundingFunctionParameters | ()\n(cb) |
| index.js:12:51:12:52 | cb | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:51:12:52 | cb | enclosingFunctionName |  |
| index.js:12:51:12:52 | cb | fileImports | child_process fs mongoose underscore |
| index.js:12:51:12:54 | cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:51:12:54 | cb() | contextSurroundingFunctionParameters | ()\n(cb) |
| index.js:12:51:12:54 | cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:51:12:54 | cb() | enclosingFunctionName |  |
| index.js:12:51:12:54 | cb() | fileImports | child_process fs mongoose underscore |
| index.js:12:51:12:54 | exceptional return of cb() | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:12:51:12:54 | exceptional return of cb() | contextSurroundingFunctionParameters |  |
| index.js:12:51:12:54 | exceptional return of cb() | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:12:51:12:54 | exceptional return of cb() | enclosingFunctionName |  |
| index.js:12:51:12:54 | exceptional return of cb() | fileImports | child_process fs mongoose underscore |
| index.js:13:3:13:5 | obj | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:3:13:5 | obj | contextSurroundingFunctionParameters | () |
| index.js:13:3:13:5 | obj | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:3:13:5 | obj | enclosingFunctionName |  |
| index.js:13:3:13:5 | obj | fileImports | child_process fs mongoose underscore |
| index.js:13:3:13:7 | obj.f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:3:13:7 | obj.f | contextSurroundingFunctionParameters | () |
| index.js:13:3:13:7 | obj.f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:3:13:7 | obj.f | enclosingFunctionName |  |
| index.js:13:3:13:7 | obj.f | fileImports | child_process fs mongoose underscore |
| index.js:13:3:13:18 | exceptional return of obj.f(obj.a.b.c) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:3:13:18 | exceptional return of obj.f(obj.a.b.c) | contextSurroundingFunctionParameters |  |
| index.js:13:3:13:18 | exceptional return of obj.f(obj.a.b.c) | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:3:13:18 | exceptional return of obj.f(obj.a.b.c) | enclosingFunctionName |  |
| index.js:13:3:13:18 | exceptional return of obj.f(obj.a.b.c) | fileImports | child_process fs mongoose underscore |
| index.js:13:3:13:18 | obj.f(obj.a.b.c) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:3:13:18 | obj.f(obj.a.b.c) | contextSurroundingFunctionParameters | () |
| index.js:13:3:13:18 | obj.f(obj.a.b.c) | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:3:13:18 | obj.f(obj.a.b.c) | enclosingFunctionName |  |
| index.js:13:3:13:18 | obj.f(obj.a.b.c) | fileImports | child_process fs mongoose underscore |
| index.js:13:7:13:7 | f | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:7:13:7 | f | contextSurroundingFunctionParameters | () |
| index.js:13:7:13:7 | f | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:7:13:7 | f | enclosingFunctionName |  |
| index.js:13:7:13:7 | f | fileImports | child_process fs mongoose underscore |
| index.js:13:9:13:11 | obj | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:9:13:11 | obj | contextSurroundingFunctionParameters | () |
| index.js:13:9:13:11 | obj | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:9:13:11 | obj | enclosingFunctionName |  |
| index.js:13:9:13:11 | obj | fileImports | child_process fs mongoose underscore |
| index.js:13:9:13:13 | obj.a | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:9:13:13 | obj.a | contextSurroundingFunctionParameters | () |
| index.js:13:9:13:13 | obj.a | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:9:13:13 | obj.a | enclosingFunctionName |  |
| index.js:13:9:13:13 | obj.a | fileImports | child_process fs mongoose underscore |
| index.js:13:9:13:15 | obj.a.b | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:9:13:15 | obj.a.b | contextSurroundingFunctionParameters | () |
| index.js:13:9:13:15 | obj.a.b | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:9:13:15 | obj.a.b | enclosingFunctionName |  |
| index.js:13:9:13:15 | obj.a.b | fileImports | child_process fs mongoose underscore |
| index.js:13:9:13:17 | obj.a.b.c | CalleeFlexibleAccessPath | obj.f |
| index.js:13:9:13:17 | obj.a.b.c | InputArgumentIndex | 0 |
| index.js:13:9:13:17 | obj.a.b.c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:9:13:17 | obj.a.b.c | contextSurroundingFunctionParameters | () |
| index.js:13:9:13:17 | obj.a.b.c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:9:13:17 | obj.a.b.c | enclosingFunctionName |  |
| index.js:13:9:13:17 | obj.a.b.c | fileImports | child_process fs mongoose underscore |
| index.js:13:9:13:17 | obj.a.b.c | receiverName | obj |
| index.js:13:13:13:13 | a | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:13:13:13 | a | contextSurroundingFunctionParameters | () |
| index.js:13:13:13:13 | a | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:13:13:13 | a | enclosingFunctionName |  |
| index.js:13:13:13:13 | a | fileImports | child_process fs mongoose underscore |
| index.js:13:15:13:15 | b | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:15:13:15 | b | contextSurroundingFunctionParameters | () |
| index.js:13:15:13:15 | b | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:15:13:15 | b | enclosingFunctionName |  |
| index.js:13:15:13:15 | b | fileImports | child_process fs mongoose underscore |
| index.js:13:17:13:17 | c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:13:17:13:17 | c | contextSurroundingFunctionParameters | () |
| index.js:13:17:13:17 | c | enclosingFunctionBody | unknown toString fs readFile withCallback cb cb withCallback 42 obj a b c 42 f cb cb obj f obj a b c |
| index.js:13:17:13:17 | c | enclosingFunctionName |  |
| index.js:13:17:13:17 | c | fileImports | child_process fs mongoose underscore |
| index.js:16:7:16:7 | _ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:7:16:7 | _ | contextSurroundingFunctionParameters |  |
| index.js:16:7:16:7 | _ | contextSurroundingFunctionParameters |  |
| index.js:16:7:16:7 | _ | fileImports | child_process fs mongoose underscore |
| index.js:16:7:16:31 | _ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:7:16:31 | _ | contextSurroundingFunctionParameters |  |
| index.js:16:7:16:31 | _ | fileImports | child_process fs mongoose underscore |
| index.js:16:7:16:31 | _ = req ... score") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:7:16:31 | _ = req ... score") | contextSurroundingFunctionParameters |  |
| index.js:16:7:16:31 | _ = req ... score") | fileImports | child_process fs mongoose underscore |
| index.js:16:11:16:17 | require | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:11:16:17 | require | contextSurroundingFunctionParameters |  |
| index.js:16:11:16:17 | require | fileImports | child_process fs mongoose underscore |
| index.js:16:11:16:31 | exceptional return of require ... score") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:11:16:31 | exceptional return of require ... score") | contextSurroundingFunctionParameters |  |
| index.js:16:11:16:31 | exceptional return of require ... score") | fileImports | child_process fs mongoose underscore |
| index.js:16:11:16:31 | require ... score") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:11:16:31 | require ... score") | contextSurroundingFunctionParameters |  |
| index.js:16:11:16:31 | require ... score") | fileImports | child_process fs mongoose underscore |
| index.js:16:19:16:30 | "underscore" | CalleeFlexibleAccessPath | require |
| index.js:16:19:16:30 | "underscore" | InputArgumentIndex | 0 |
| index.js:16:19:16:30 | "underscore" | calleeImports |  |
| index.js:16:19:16:30 | "underscore" | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:16:19:16:30 | "underscore" | contextSurroundingFunctionParameters |  |
| index.js:16:19:16:30 | "underscore" | fileImports | child_process fs mongoose underscore |
| index.js:17:3:17:4 | cp | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:3:17:4 | cp | contextSurroundingFunctionParameters |  |
| index.js:17:3:17:4 | cp | contextSurroundingFunctionParameters |  |
| index.js:17:3:17:4 | cp | fileImports | child_process fs mongoose underscore |
| index.js:17:3:17:31 | cp | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:3:17:31 | cp | contextSurroundingFunctionParameters |  |
| index.js:17:3:17:31 | cp | fileImports | child_process fs mongoose underscore |
| index.js:17:3:17:31 | cp = re ... ocess") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:3:17:31 | cp = re ... ocess") | contextSurroundingFunctionParameters |  |
| index.js:17:3:17:31 | cp = re ... ocess") | fileImports | child_process fs mongoose underscore |
| index.js:17:8:17:14 | require | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:8:17:14 | require | contextSurroundingFunctionParameters |  |
| index.js:17:8:17:14 | require | fileImports | child_process fs mongoose underscore |
| index.js:17:8:17:31 | exceptional return of require ... ocess") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:8:17:31 | exceptional return of require ... ocess") | contextSurroundingFunctionParameters |  |
| index.js:17:8:17:31 | exceptional return of require ... ocess") | fileImports | child_process fs mongoose underscore |
| index.js:17:8:17:31 | require ... ocess") | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:8:17:31 | require ... ocess") | contextSurroundingFunctionParameters |  |
| index.js:17:8:17:31 | require ... ocess") | fileImports | child_process fs mongoose underscore |
| index.js:17:16:17:30 | "child_process" | CalleeFlexibleAccessPath | require |
| index.js:17:16:17:30 | "child_process" | InputArgumentIndex | 0 |
| index.js:17:16:17:30 | "child_process" | calleeImports |  |
| index.js:17:16:17:30 | "child_process" | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:17:16:17:30 | "child_process" | contextSurroundingFunctionParameters |  |
| index.js:17:16:17:30 | "child_process" | fileImports | child_process fs mongoose underscore |
| index.js:18:1:23:2 | (functi ... (x);\\n}) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:1:23:2 | (functi ... (x);\\n}) | contextSurroundingFunctionParameters |  |
| index.js:18:1:23:2 | (functi ... (x);\\n}) | fileImports | child_process fs mongoose underscore |
| index.js:18:2:18:1 | _ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:18:1 | _ | contextSurroundingFunctionParameters |  |
| index.js:18:2:18:1 | _ | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:18:1 | _ | enclosingFunctionName |  |
| index.js:18:2:18:1 | _ | fileImports | child_process fs mongoose underscore |
| index.js:18:2:18:1 | cp | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:18:1 | cp | contextSurroundingFunctionParameters |  |
| index.js:18:2:18:1 | cp | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:18:1 | cp | enclosingFunctionName |  |
| index.js:18:2:18:1 | cp | fileImports | child_process fs mongoose underscore |
| index.js:18:2:18:1 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:18:1 | this | contextSurroundingFunctionParameters |  |
| index.js:18:2:18:1 | this | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:18:1 | this | enclosingFunctionName |  |
| index.js:18:2:18:1 | this | fileImports | child_process fs mongoose underscore |
| index.js:18:2:23:1 | 'arguments' object of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:23:1 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:18:2:23:1 | 'arguments' object of anonymous function | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:23:1 | 'arguments' object of anonymous function | enclosingFunctionName |  |
| index.js:18:2:23:1 | 'arguments' object of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:18:2:23:1 | exceptional return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:23:1 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:18:2:23:1 | exceptional return of anonymous function | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:23:1 | exceptional return of anonymous function | enclosingFunctionName |  |
| index.js:18:2:23:1 | exceptional return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:18:2:23:1 | functio ... c(x);\\n} | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:23:1 | functio ... c(x);\\n} | contextSurroundingFunctionParameters | () |
| index.js:18:2:23:1 | functio ... c(x);\\n} | fileImports | child_process fs mongoose underscore |
| index.js:18:2:23:1 | return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:18:2:23:1 | return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:18:2:23:1 | return of anonymous function | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:18:2:23:1 | return of anonymous function | enclosingFunctionName |  |
| index.js:18:2:23:1 | return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:19:7:19:7 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:7:19:7 | x | contextSurroundingFunctionParameters | () |
| index.js:19:7:19:7 | x | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:7:19:7 | x | enclosingFunctionName |  |
| index.js:19:7:19:7 | x | fileImports | child_process fs mongoose underscore |
| index.js:19:7:19:19 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:7:19:19 | x | contextSurroundingFunctionParameters |  |
| index.js:19:7:19:19 | x | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:7:19:19 | x | enclosingFunctionName |  |
| index.js:19:7:19:19 | x | fileImports | child_process fs mongoose underscore |
| index.js:19:7:19:19 | x = { p: 42 } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:7:19:19 | x = { p: 42 } | contextSurroundingFunctionParameters | () |
| index.js:19:7:19:19 | x = { p: 42 } | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:7:19:19 | x = { p: 42 } | enclosingFunctionName |  |
| index.js:19:7:19:19 | x = { p: 42 } | fileImports | child_process fs mongoose underscore |
| index.js:19:11:19:19 | { p: 42 } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:11:19:19 | { p: 42 } | contextSurroundingFunctionParameters | () |
| index.js:19:11:19:19 | { p: 42 } | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:11:19:19 | { p: 42 } | enclosingFunctionName |  |
| index.js:19:11:19:19 | { p: 42 } | fileImports | child_process fs mongoose underscore |
| index.js:19:13:19:13 | p | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:13:19:13 | p | contextSurroundingFunctionParameters | () |
| index.js:19:13:19:13 | p | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:13:19:13 | p | enclosingFunctionName |  |
| index.js:19:13:19:13 | p | fileImports | child_process fs mongoose underscore |
| index.js:19:13:19:17 | p: 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:13:19:17 | p: 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:13:19:17 | p: 42 | contextSurroundingFunctionParameters |  |
| index.js:19:13:19:17 | p: 42 | contextSurroundingFunctionParameters |  |
| index.js:19:13:19:17 | p: 42 | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:13:19:17 | p: 42 | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:13:19:17 | p: 42 | enclosingFunctionName |  |
| index.js:19:13:19:17 | p: 42 | enclosingFunctionName |  |
| index.js:19:13:19:17 | p: 42 | fileImports | child_process fs mongoose underscore |
| index.js:19:13:19:17 | p: 42 | fileImports | child_process fs mongoose underscore |
| index.js:19:16:19:17 | 42 | assignedToPropName | p |
| index.js:19:16:19:17 | 42 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:19:16:19:17 | 42 | contextSurroundingFunctionParameters | () |
| index.js:19:16:19:17 | 42 | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:19:16:19:17 | 42 | enclosingFunctionName |  |
| index.js:19:16:19:17 | 42 | fileImports | child_process fs mongoose underscore |
| index.js:20:3:20:4 | [] | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:3:20:4 | [] | contextSurroundingFunctionParameters | () |
| index.js:20:3:20:4 | [] | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:3:20:4 | [] | enclosingFunctionName |  |
| index.js:20:3:20:4 | [] | fileImports | child_process fs mongoose underscore |
| index.js:20:3:20:9 | [].push | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:3:20:9 | [].push | contextSurroundingFunctionParameters | () |
| index.js:20:3:20:9 | [].push | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:3:20:9 | [].push | enclosingFunctionName |  |
| index.js:20:3:20:9 | [].push | fileImports | child_process fs mongoose underscore |
| index.js:20:3:20:12 | [].push(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:3:20:12 | [].push(x) | contextSurroundingFunctionParameters | () |
| index.js:20:3:20:12 | [].push(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:3:20:12 | [].push(x) | enclosingFunctionName |  |
| index.js:20:3:20:12 | [].push(x) | fileImports | child_process fs mongoose underscore |
| index.js:20:3:20:12 | exceptional return of [].push(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:3:20:12 | exceptional return of [].push(x) | contextSurroundingFunctionParameters |  |
| index.js:20:3:20:12 | exceptional return of [].push(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:3:20:12 | exceptional return of [].push(x) | enclosingFunctionName |  |
| index.js:20:3:20:12 | exceptional return of [].push(x) | fileImports | child_process fs mongoose underscore |
| index.js:20:6:20:9 | push | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:6:20:9 | push | contextSurroundingFunctionParameters | () |
| index.js:20:6:20:9 | push | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:6:20:9 | push | enclosingFunctionName |  |
| index.js:20:6:20:9 | push | fileImports | child_process fs mongoose underscore |
| index.js:20:11:20:11 | x | CalleeFlexibleAccessPath | ?.push |
| index.js:20:11:20:11 | x | InputArgumentIndex | 0 |
| index.js:20:11:20:11 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:20:11:20:11 | x | contextSurroundingFunctionParameters | () |
| index.js:20:11:20:11 | x | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:20:11:20:11 | x | enclosingFunctionName |  |
| index.js:20:11:20:11 | x | fileImports | child_process fs mongoose underscore |
| index.js:21:3:21:3 | _ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:3:21:3 | _ | contextSurroundingFunctionParameters | () |
| index.js:21:3:21:3 | _ | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:3:21:3 | _ | enclosingFunctionName |  |
| index.js:21:3:21:3 | _ | fileImports | child_process fs mongoose underscore |
| index.js:21:3:21:7 | _.map | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:3:21:7 | _.map | contextSurroundingFunctionParameters | () |
| index.js:21:3:21:7 | _.map | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:3:21:7 | _.map | enclosingFunctionName |  |
| index.js:21:3:21:7 | _.map | fileImports | child_process fs mongoose underscore |
| index.js:21:3:21:10 | _.map(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:3:21:10 | _.map(x) | contextSurroundingFunctionParameters | () |
| index.js:21:3:21:10 | _.map(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:3:21:10 | _.map(x) | enclosingFunctionName |  |
| index.js:21:3:21:10 | _.map(x) | fileImports | child_process fs mongoose underscore |
| index.js:21:3:21:10 | exceptional return of _.map(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:3:21:10 | exceptional return of _.map(x) | contextSurroundingFunctionParameters |  |
| index.js:21:3:21:10 | exceptional return of _.map(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:3:21:10 | exceptional return of _.map(x) | enclosingFunctionName |  |
| index.js:21:3:21:10 | exceptional return of _.map(x) | fileImports | child_process fs mongoose underscore |
| index.js:21:5:21:7 | map | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:5:21:7 | map | contextSurroundingFunctionParameters | () |
| index.js:21:5:21:7 | map | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:5:21:7 | map | enclosingFunctionName |  |
| index.js:21:5:21:7 | map | fileImports | child_process fs mongoose underscore |
| index.js:21:9:21:9 | x | CalleeFlexibleAccessPath | _.map |
| index.js:21:9:21:9 | x | InputArgumentIndex | 0 |
| index.js:21:9:21:9 | x | calleeImports | underscore |
| index.js:21:9:21:9 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:21:9:21:9 | x | contextSurroundingFunctionParameters | () |
| index.js:21:9:21:9 | x | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:21:9:21:9 | x | enclosingFunctionName |  |
| index.js:21:9:21:9 | x | fileImports | child_process fs mongoose underscore |
| index.js:21:9:21:9 | x | receiverName | _ |
| index.js:22:3:22:4 | cp | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:3:22:4 | cp | contextSurroundingFunctionParameters | () |
| index.js:22:3:22:4 | cp | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:3:22:4 | cp | enclosingFunctionName |  |
| index.js:22:3:22:4 | cp | fileImports | child_process fs mongoose underscore |
| index.js:22:3:22:9 | cp.exec | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:3:22:9 | cp.exec | contextSurroundingFunctionParameters | () |
| index.js:22:3:22:9 | cp.exec | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:3:22:9 | cp.exec | enclosingFunctionName |  |
| index.js:22:3:22:9 | cp.exec | fileImports | child_process fs mongoose underscore |
| index.js:22:3:22:12 | cp.exec(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:3:22:12 | cp.exec(x) | contextSurroundingFunctionParameters | () |
| index.js:22:3:22:12 | cp.exec(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:3:22:12 | cp.exec(x) | enclosingFunctionName |  |
| index.js:22:3:22:12 | cp.exec(x) | fileImports | child_process fs mongoose underscore |
| index.js:22:3:22:12 | exceptional return of cp.exec(x) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:3:22:12 | exceptional return of cp.exec(x) | contextSurroundingFunctionParameters |  |
| index.js:22:3:22:12 | exceptional return of cp.exec(x) | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:3:22:12 | exceptional return of cp.exec(x) | enclosingFunctionName |  |
| index.js:22:3:22:12 | exceptional return of cp.exec(x) | fileImports | child_process fs mongoose underscore |
| index.js:22:6:22:9 | exec | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:6:22:9 | exec | contextSurroundingFunctionParameters | () |
| index.js:22:6:22:9 | exec | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:6:22:9 | exec | enclosingFunctionName |  |
| index.js:22:6:22:9 | exec | fileImports | child_process fs mongoose underscore |
| index.js:22:11:22:11 | x | CalleeFlexibleAccessPath | cp.exec |
| index.js:22:11:22:11 | x | InputArgumentIndex | 0 |
| index.js:22:11:22:11 | x | calleeImports | child_process |
| index.js:22:11:22:11 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:22:11:22:11 | x | contextSurroundingFunctionParameters | () |
| index.js:22:11:22:11 | x | enclosingFunctionBody | x p 42 push x _ map x cp exec x |
| index.js:22:11:22:11 | x | enclosingFunctionName |  |
| index.js:22:11:22:11 | x | fileImports | child_process fs mongoose underscore |
| index.js:22:11:22:11 | x | receiverName | cp |
| index.js:25:7:25:14 | mongoose | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:7:25:14 | mongoose | contextSurroundingFunctionParameters |  |
| index.js:25:7:25:14 | mongoose | fileImports | child_process fs mongoose underscore |
| index.js:25:7:25:36 | mongoos ... goose') | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:7:25:36 | mongoos ... goose') | contextSurroundingFunctionParameters |  |
| index.js:25:7:25:36 | mongoos ... goose') | fileImports | child_process fs mongoose underscore |
| index.js:25:7:25:36 | mongoose | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:7:25:36 | mongoose | contextSurroundingFunctionParameters |  |
| index.js:25:7:25:36 | mongoose | fileImports | child_process fs mongoose underscore |
| index.js:25:18:25:24 | require | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:18:25:24 | require | contextSurroundingFunctionParameters |  |
| index.js:25:18:25:24 | require | fileImports | child_process fs mongoose underscore |
| index.js:25:18:25:36 | exceptional return of require('mongoose') | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:18:25:36 | exceptional return of require('mongoose') | contextSurroundingFunctionParameters |  |
| index.js:25:18:25:36 | exceptional return of require('mongoose') | fileImports | child_process fs mongoose underscore |
| index.js:25:18:25:36 | require('mongoose') | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:18:25:36 | require('mongoose') | contextSurroundingFunctionParameters |  |
| index.js:25:18:25:36 | require('mongoose') | fileImports | child_process fs mongoose underscore |
| index.js:25:26:25:35 | 'mongoose' | CalleeFlexibleAccessPath | require |
| index.js:25:26:25:35 | 'mongoose' | InputArgumentIndex | 0 |
| index.js:25:26:25:35 | 'mongoose' | calleeImports |  |
| index.js:25:26:25:35 | 'mongoose' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:25:26:25:35 | 'mongoose' | contextSurroundingFunctionParameters |  |
| index.js:25:26:25:35 | 'mongoose' | fileImports | child_process fs mongoose underscore |
| index.js:26:3:26:6 | User | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:3:26:6 | User | contextSurroundingFunctionParameters |  |
| index.js:26:3:26:6 | User | contextSurroundingFunctionParameters |  |
| index.js:26:3:26:6 | User | fileImports | child_process fs mongoose underscore |
| index.js:26:3:26:37 | User | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:3:26:37 | User | contextSurroundingFunctionParameters |  |
| index.js:26:3:26:37 | User | fileImports | child_process fs mongoose underscore |
| index.js:26:3:26:37 | User =  ... , null) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:3:26:37 | User =  ... , null) | contextSurroundingFunctionParameters |  |
| index.js:26:3:26:37 | User =  ... , null) | fileImports | child_process fs mongoose underscore |
| index.js:26:10:26:17 | mongoose | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:10:26:17 | mongoose | contextSurroundingFunctionParameters |  |
| index.js:26:10:26:17 | mongoose | fileImports | child_process fs mongoose underscore |
| index.js:26:10:26:23 | mongoose.model | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:10:26:23 | mongoose.model | contextSurroundingFunctionParameters |  |
| index.js:26:10:26:23 | mongoose.model | fileImports | child_process fs mongoose underscore |
| index.js:26:10:26:37 | exceptional return of mongoos ... , null) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:10:26:37 | exceptional return of mongoos ... , null) | contextSurroundingFunctionParameters |  |
| index.js:26:10:26:37 | exceptional return of mongoos ... , null) | fileImports | child_process fs mongoose underscore |
| index.js:26:10:26:37 | mongoos ... , null) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:10:26:37 | mongoos ... , null) | contextSurroundingFunctionParameters |  |
| index.js:26:10:26:37 | mongoos ... , null) | fileImports | child_process fs mongoose underscore |
| index.js:26:19:26:23 | model | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:19:26:23 | model | contextSurroundingFunctionParameters |  |
| index.js:26:19:26:23 | model | fileImports | child_process fs mongoose underscore |
| index.js:26:25:26:30 | 'User' | CalleeFlexibleAccessPath | mongoose.model |
| index.js:26:25:26:30 | 'User' | InputArgumentIndex | 0 |
| index.js:26:25:26:30 | 'User' | calleeImports | mongoose |
| index.js:26:25:26:30 | 'User' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:25:26:30 | 'User' | contextSurroundingFunctionParameters |  |
| index.js:26:25:26:30 | 'User' | fileImports | child_process fs mongoose underscore |
| index.js:26:25:26:30 | 'User' | receiverName | mongoose |
| index.js:26:33:26:36 | null | CalleeFlexibleAccessPath | mongoose.model |
| index.js:26:33:26:36 | null | InputArgumentIndex | 1 |
| index.js:26:33:26:36 | null | calleeImports | mongoose |
| index.js:26:33:26:36 | null | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:26:33:26:36 | null | contextSurroundingFunctionParameters |  |
| index.js:26:33:26:36 | null | fileImports | child_process fs mongoose underscore |
| index.js:26:33:26:36 | null | receiverName | mongoose |
| index.js:28:1:28:0 | User | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:28:0 | User | contextSurroundingFunctionParameters |  |
| index.js:28:1:28:0 | User | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:28:1:28:0 | User | enclosingFunctionName | main |
| index.js:28:1:28:0 | User | fileImports | child_process fs mongoose underscore |
| index.js:28:1:28:0 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:28:0 | this | contextSurroundingFunctionParameters |  |
| index.js:28:1:28:0 | this | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:28:1:28:0 | this | enclosingFunctionName | main |
| index.js:28:1:28:0 | this | fileImports | child_process fs mongoose underscore |
| index.js:28:1:39:1 | 'arguments' object of function main | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:39:1 | 'arguments' object of function main | contextSurroundingFunctionParameters |  |
| index.js:28:1:39:1 | 'arguments' object of function main | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:28:1:39:1 | 'arguments' object of function main | enclosingFunctionName | main |
| index.js:28:1:39:1 | 'arguments' object of function main | fileImports | child_process fs mongoose underscore |
| index.js:28:1:39:1 | exceptional return of function main | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:39:1 | exceptional return of function main | contextSurroundingFunctionParameters |  |
| index.js:28:1:39:1 | exceptional return of function main | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:28:1:39:1 | exceptional return of function main | enclosingFunctionName | main |
| index.js:28:1:39:1 | exceptional return of function main | fileImports | child_process fs mongoose underscore |
| index.js:28:1:39:1 | functio ...   });\\n} | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:39:1 | functio ...   });\\n} | contextSurroundingFunctionParameters |  |
| index.js:28:1:39:1 | functio ...   });\\n} | fileImports | child_process fs mongoose underscore |
| index.js:28:1:39:1 | return of function main | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:1:39:1 | return of function main | contextSurroundingFunctionParameters |  |
| index.js:28:1:39:1 | return of function main | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:28:1:39:1 | return of function main | enclosingFunctionName | main |
| index.js:28:1:39:1 | return of function main | fileImports | child_process fs mongoose underscore |
| index.js:28:10:28:13 | main | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:28:10:28:13 | main | contextSurroundingFunctionParameters | () |
| index.js:28:10:28:13 | main | fileImports | child_process fs mongoose underscore |
| index.js:29:3:29:6 | User | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:29:6 | User | contextSurroundingFunctionParameters | () |
| index.js:29:3:29:6 | User | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:29:6 | User | enclosingFunctionName | main |
| index.js:29:3:29:6 | User | fileImports | child_process fs mongoose underscore |
| index.js:29:3:29:11 | User.find | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:29:11 | User.find | contextSurroundingFunctionParameters | () |
| index.js:29:3:29:11 | User.find | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:29:11 | User.find | enclosingFunctionName | main |
| index.js:29:3:29:11 | User.find | fileImports | child_process fs mongoose underscore |
| index.js:29:3:29:32 | User.fi ... true }) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:29:32 | User.fi ... true }) | contextSurroundingFunctionParameters | () |
| index.js:29:3:29:32 | User.fi ... true }) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:29:32 | User.fi ... true }) | enclosingFunctionName | main |
| index.js:29:3:29:32 | User.fi ... true }) | fileImports | child_process fs mongoose underscore |
| index.js:29:3:29:32 | exceptional return of User.fi ... true }) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:29:32 | exceptional return of User.fi ... true }) | contextSurroundingFunctionParameters |  |
| index.js:29:3:29:32 | exceptional return of User.fi ... true }) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:29:32 | exceptional return of User.fi ... true }) | enclosingFunctionName | main |
| index.js:29:3:29:32 | exceptional return of User.fi ... true }) | fileImports | child_process fs mongoose underscore |
| index.js:29:3:30:9 | User.fi ...   .exec | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:30:9 | User.fi ...   .exec | contextSurroundingFunctionParameters | () |
| index.js:29:3:30:9 | User.fi ...   .exec | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:30:9 | User.fi ...   .exec | enclosingFunctionName | main |
| index.js:29:3:30:9 | User.fi ...   .exec | fileImports | child_process fs mongoose underscore |
| index.js:29:3:38:6 | User.fi ... \\n    }) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:38:6 | User.fi ... \\n    }) | contextSurroundingFunctionParameters | () |
| index.js:29:3:38:6 | User.fi ... \\n    }) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:38:6 | User.fi ... \\n    }) | enclosingFunctionName | main |
| index.js:29:3:38:6 | User.fi ... \\n    }) | fileImports | child_process fs mongoose underscore |
| index.js:29:3:38:6 | exceptional return of User.fi ... \\n    }) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:3:38:6 | exceptional return of User.fi ... \\n    }) | contextSurroundingFunctionParameters |  |
| index.js:29:3:38:6 | exceptional return of User.fi ... \\n    }) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:3:38:6 | exceptional return of User.fi ... \\n    }) | enclosingFunctionName | main |
| index.js:29:3:38:6 | exceptional return of User.fi ... \\n    }) | fileImports | child_process fs mongoose underscore |
| index.js:29:8:29:11 | find | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:8:29:11 | find | contextSurroundingFunctionParameters | () |
| index.js:29:8:29:11 | find | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:8:29:11 | find | enclosingFunctionName | main |
| index.js:29:8:29:11 | find | fileImports | child_process fs mongoose underscore |
| index.js:29:13:29:31 | { 'isAdmin': true } | CalleeFlexibleAccessPath | User.find |
| index.js:29:13:29:31 | { 'isAdmin': true } | InputArgumentIndex | 0 |
| index.js:29:13:29:31 | { 'isAdmin': true } | calleeImports | mongoose |
| index.js:29:13:29:31 | { 'isAdmin': true } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:13:29:31 | { 'isAdmin': true } | contextSurroundingFunctionParameters | () |
| index.js:29:13:29:31 | { 'isAdmin': true } | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:13:29:31 | { 'isAdmin': true } | enclosingFunctionName | main |
| index.js:29:13:29:31 | { 'isAdmin': true } | fileImports | child_process fs mongoose underscore |
| index.js:29:13:29:31 | { 'isAdmin': true } | receiverName | User |
| index.js:29:15:29:23 | 'isAdmin' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:15:29:23 | 'isAdmin' | contextSurroundingFunctionParameters | () |
| index.js:29:15:29:23 | 'isAdmin' | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:15:29:23 | 'isAdmin' | enclosingFunctionName | main |
| index.js:29:15:29:23 | 'isAdmin' | fileImports | child_process fs mongoose underscore |
| index.js:29:15:29:29 | 'isAdmin': true | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:15:29:29 | 'isAdmin': true | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:15:29:29 | 'isAdmin': true | contextSurroundingFunctionParameters |  |
| index.js:29:15:29:29 | 'isAdmin': true | contextSurroundingFunctionParameters |  |
| index.js:29:15:29:29 | 'isAdmin': true | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:15:29:29 | 'isAdmin': true | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:15:29:29 | 'isAdmin': true | enclosingFunctionName | main |
| index.js:29:15:29:29 | 'isAdmin': true | enclosingFunctionName | main |
| index.js:29:15:29:29 | 'isAdmin': true | fileImports | child_process fs mongoose underscore |
| index.js:29:15:29:29 | 'isAdmin': true | fileImports | child_process fs mongoose underscore |
| index.js:29:26:29:29 | true | CalleeFlexibleAccessPath | User.find |
| index.js:29:26:29:29 | true | InputAccessPathFromCallee | 0.isAdmin |
| index.js:29:26:29:29 | true | InputArgumentIndex | 0 |
| index.js:29:26:29:29 | true | assignedToPropName | isAdmin |
| index.js:29:26:29:29 | true | calleeImports | mongoose |
| index.js:29:26:29:29 | true | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:29:26:29:29 | true | contextSurroundingFunctionParameters | () |
| index.js:29:26:29:29 | true | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:29:26:29:29 | true | enclosingFunctionName | main |
| index.js:29:26:29:29 | true | fileImports | child_process fs mongoose underscore |
| index.js:30:6:30:9 | exec | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:6:30:9 | exec | contextSurroundingFunctionParameters | () |
| index.js:30:6:30:9 | exec | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:6:30:9 | exec | enclosingFunctionName | main |
| index.js:30:6:30:9 | exec | fileImports | child_process fs mongoose underscore |
| index.js:30:11:30:10 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:11:30:10 | this | contextSurroundingFunctionParameters |  |
| index.js:30:11:30:10 | this | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:11:30:10 | this | enclosingFunctionName | main |
| index.js:30:11:30:10 | this | fileImports | child_process fs mongoose underscore |
| index.js:30:11:38:5 | 'arguments' object of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:11:38:5 | 'arguments' object of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:30:11:38:5 | 'arguments' object of anonymous function | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:11:38:5 | 'arguments' object of anonymous function | enclosingFunctionName | main |
| index.js:30:11:38:5 | 'arguments' object of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:30:11:38:5 | exceptional return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:11:38:5 | exceptional return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:30:11:38:5 | exceptional return of anonymous function | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:11:38:5 | exceptional return of anonymous function | enclosingFunctionName | main |
| index.js:30:11:38:5 | exceptional return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:30:11:38:5 | functio ... }\\n    } | CalleeFlexibleAccessPath | User.find().exec |
| index.js:30:11:38:5 | functio ... }\\n    } | InputArgumentIndex | 0 |
| index.js:30:11:38:5 | functio ... }\\n    } | calleeImports | mongoose |
| index.js:30:11:38:5 | functio ... }\\n    } | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:11:38:5 | functio ... }\\n    } | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:30:11:38:5 | functio ... }\\n    } | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:11:38:5 | functio ... }\\n    } | enclosingFunctionName | main |
| index.js:30:11:38:5 | functio ... }\\n    } | fileImports | child_process fs mongoose underscore |
| index.js:30:11:38:5 | return of anonymous function | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:11:38:5 | return of anonymous function | contextSurroundingFunctionParameters |  |
| index.js:30:11:38:5 | return of anonymous function | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:11:38:5 | return of anonymous function | enclosingFunctionName | main |
| index.js:30:11:38:5 | return of anonymous function | fileImports | child_process fs mongoose underscore |
| index.js:30:21:30:23 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:21:30:23 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:21:30:23 | err | contextSurroundingFunctionParameters |  |
| index.js:30:21:30:23 | err | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:30:21:30:23 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:21:30:23 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:21:30:23 | err | enclosingFunctionName | main |
| index.js:30:21:30:23 | err | enclosingFunctionName | main |
| index.js:30:21:30:23 | err | fileImports | child_process fs mongoose underscore |
| index.js:30:21:30:23 | err | fileImports | child_process fs mongoose underscore |
| index.js:30:26:30:35 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:26:30:35 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:30:26:30:35 | adminUsers | contextSurroundingFunctionParameters |  |
| index.js:30:26:30:35 | adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:30:26:30:35 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:26:30:35 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:30:26:30:35 | adminUsers | enclosingFunctionName | main |
| index.js:30:26:30:35 | adminUsers | enclosingFunctionName | main |
| index.js:30:26:30:35 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:30:26:30:35 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:31:11:31:13 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:11:31:13 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:11:31:13 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:11:31:13 | err | contextSurroundingFunctionParameters |  |
| index.js:31:11:31:13 | err | contextSurroundingFunctionParameters |  |
| index.js:31:11:31:13 | err | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:31:11:31:13 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:11:31:13 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:11:31:13 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:11:31:13 | err | enclosingFunctionName | main |
| index.js:31:11:31:13 | err | enclosingFunctionName | main |
| index.js:31:11:31:13 | err | enclosingFunctionName | main |
| index.js:31:11:31:13 | err | fileImports | child_process fs mongoose underscore |
| index.js:31:11:31:13 | err | fileImports | child_process fs mongoose underscore |
| index.js:31:11:31:13 | err | fileImports | child_process fs mongoose underscore |
| index.js:31:11:31:28 | err \|\| !adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:11:31:28 | err \|\| !adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:31:11:31:28 | err \|\| !adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:11:31:28 | err \|\| !adminUsers | enclosingFunctionName | main |
| index.js:31:11:31:28 | err \|\| !adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:31:18:31:28 | !adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:18:31:28 | !adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:31:18:31:28 | !adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:18:31:28 | !adminUsers | enclosingFunctionName | main |
| index.js:31:18:31:28 | !adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:31:19:31:28 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:19:31:28 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:19:31:28 | adminUsers | contextSurroundingFunctionParameters |  |
| index.js:31:19:31:28 | adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:31:19:31:28 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:19:31:28 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:19:31:28 | adminUsers | enclosingFunctionName | main |
| index.js:31:19:31:28 | adminUsers | enclosingFunctionName | main |
| index.js:31:19:31:28 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:31:19:31:28 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:31:31:31:31 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:31:31:31:31 | err | contextSurroundingFunctionParameters |  |
| index.js:31:31:31:31 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:31:31:31:31 | err | enclosingFunctionName | main |
| index.js:31:31:31:31 | err | fileImports | child_process fs mongoose underscore |
| index.js:32:15:32:17 | err | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:32:15:32:17 | err | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:32:15:32:17 | err | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:32:15:32:17 | err | enclosingFunctionName | main |
| index.js:32:15:32:17 | err | fileImports | child_process fs mongoose underscore |
| index.js:35:16:35:16 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:16:35:16 | i | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:16:35:16 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:16:35:16 | i | enclosingFunctionName | main |
| index.js:35:16:35:16 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:16:35:20 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:16:35:20 | i | contextSurroundingFunctionParameters |  |
| index.js:35:16:35:20 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:16:35:20 | i | enclosingFunctionName | main |
| index.js:35:16:35:20 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:16:35:20 | i = 0 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:16:35:20 | i = 0 | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:16:35:20 | i = 0 | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:16:35:20 | i = 0 | enclosingFunctionName | main |
| index.js:35:16:35:20 | i = 0 | fileImports | child_process fs mongoose underscore |
| index.js:35:20:35:20 | 0 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:20:35:20 | 0 | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:20:35:20 | 0 | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:20:35:20 | 0 | enclosingFunctionName | main |
| index.js:35:20:35:20 | 0 | fileImports | child_process fs mongoose underscore |
| index.js:35:23:35:23 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:23:35:23 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:23:35:23 | i | contextSurroundingFunctionParameters |  |
| index.js:35:23:35:23 | i | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:23:35:23 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:23:35:23 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:23:35:23 | i | enclosingFunctionName | main |
| index.js:35:23:35:23 | i | enclosingFunctionName | main |
| index.js:35:23:35:23 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:23:35:23 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:23:35:43 | i < adm ... .length | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:23:35:43 | i < adm ... .length | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:23:35:43 | i < adm ... .length | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:23:35:43 | i < adm ... .length | enclosingFunctionName | main |
| index.js:35:23:35:43 | i < adm ... .length | fileImports | child_process fs mongoose underscore |
| index.js:35:27:35:36 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:27:35:36 | adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:27:35:36 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:27:35:36 | adminUsers | enclosingFunctionName | main |
| index.js:35:27:35:36 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:35:27:35:43 | adminUsers.length | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:27:35:43 | adminUsers.length | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:27:35:43 | adminUsers.length | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:27:35:43 | adminUsers.length | enclosingFunctionName | main |
| index.js:35:27:35:43 | adminUsers.length | fileImports | child_process fs mongoose underscore |
| index.js:35:38:35:43 | length | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:38:35:43 | length | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:38:35:43 | length | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:38:35:43 | length | enclosingFunctionName | main |
| index.js:35:38:35:43 | length | fileImports | child_process fs mongoose underscore |
| index.js:35:46:35:46 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:46:35:46 | i | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:46:35:46 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:46:35:46 | i | enclosingFunctionName | main |
| index.js:35:46:35:46 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:46:35:48 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:46:35:48 | i | contextSurroundingFunctionParameters |  |
| index.js:35:46:35:48 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:46:35:48 | i | enclosingFunctionName | main |
| index.js:35:46:35:48 | i | fileImports | child_process fs mongoose underscore |
| index.js:35:46:35:48 | i++ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:35:46:35:48 | i++ | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:35:46:35:48 | i++ | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:35:46:35:48 | i++ | enclosingFunctionName | main |
| index.js:35:46:35:48 | i++ | fileImports | child_process fs mongoose underscore |
| index.js:36:9:36:15 | console | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:9:36:15 | console | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:9:36:15 | console | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:9:36:15 | console | enclosingFunctionName | main |
| index.js:36:9:36:15 | console | fileImports | child_process fs mongoose underscore |
| index.js:36:9:36:19 | console.log | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:9:36:19 | console.log | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:9:36:19 | console.log | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:9:36:19 | console.log | enclosingFunctionName | main |
| index.js:36:9:36:19 | console.log | fileImports | child_process fs mongoose underscore |
| index.js:36:9:36:34 | console ... ers[i]) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:9:36:34 | console ... ers[i]) | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:9:36:34 | console ... ers[i]) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:9:36:34 | console ... ers[i]) | enclosingFunctionName | main |
| index.js:36:9:36:34 | console ... ers[i]) | fileImports | child_process fs mongoose underscore |
| index.js:36:9:36:34 | exceptional return of console ... ers[i]) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:9:36:34 | exceptional return of console ... ers[i]) | contextSurroundingFunctionParameters |  |
| index.js:36:9:36:34 | exceptional return of console ... ers[i]) | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:9:36:34 | exceptional return of console ... ers[i]) | enclosingFunctionName | main |
| index.js:36:9:36:34 | exceptional return of console ... ers[i]) | fileImports | child_process fs mongoose underscore |
| index.js:36:17:36:19 | log | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:17:36:19 | log | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:17:36:19 | log | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:17:36:19 | log | enclosingFunctionName | main |
| index.js:36:17:36:19 | log | fileImports | child_process fs mongoose underscore |
| index.js:36:21:36:30 | adminUsers | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:21:36:30 | adminUsers | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:21:36:30 | adminUsers | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:21:36:30 | adminUsers | enclosingFunctionName | main |
| index.js:36:21:36:30 | adminUsers | fileImports | child_process fs mongoose underscore |
| index.js:36:21:36:33 | adminUsers[i] | CalleeFlexibleAccessPath | console.log |
| index.js:36:21:36:33 | adminUsers[i] | InputArgumentIndex | 0 |
| index.js:36:21:36:33 | adminUsers[i] | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:21:36:33 | adminUsers[i] | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:21:36:33 | adminUsers[i] | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:21:36:33 | adminUsers[i] | enclosingFunctionName | main |
| index.js:36:21:36:33 | adminUsers[i] | fileImports | child_process fs mongoose underscore |
| index.js:36:21:36:33 | adminUsers[i] | receiverName | console |
| index.js:36:32:36:32 | i | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:36:32:36:32 | i | contextSurroundingFunctionParameters | ()\n(err, adminUsers) |
| index.js:36:32:36:32 | i | enclosingFunctionBody | User find isAdmin true exec err adminUsers err adminUsers err i 0 i adminUsers length i console log adminUsers i |
| index.js:36:32:36:32 | i | enclosingFunctionName | main |
| index.js:36:32:36:32 | i | fileImports | child_process fs mongoose underscore |
| index.js:41:1:41:0 | ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:41:0 | ready | contextSurroundingFunctionParameters |  |
| index.js:41:1:41:0 | ready | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:41:1:41:0 | ready | enclosingFunctionName | ready |
| index.js:41:1:41:0 | ready | fileImports | child_process fs mongoose underscore |
| index.js:41:1:41:0 | this | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:41:0 | this | contextSurroundingFunctionParameters |  |
| index.js:41:1:41:0 | this | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:41:1:41:0 | this | enclosingFunctionName | ready |
| index.js:41:1:41:0 | this | fileImports | child_process fs mongoose underscore |
| index.js:41:1:51:1 | 'arguments' object of function ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:51:1 | 'arguments' object of function ready | contextSurroundingFunctionParameters |  |
| index.js:41:1:51:1 | 'arguments' object of function ready | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:41:1:51:1 | 'arguments' object of function ready | enclosingFunctionName | ready |
| index.js:41:1:51:1 | 'arguments' object of function ready | fileImports | child_process fs mongoose underscore |
| index.js:41:1:51:1 | exceptional return of function ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:51:1 | exceptional return of function ready | contextSurroundingFunctionParameters |  |
| index.js:41:1:51:1 | exceptional return of function ready | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:41:1:51:1 | exceptional return of function ready | enclosingFunctionName | ready |
| index.js:41:1:51:1 | exceptional return of function ready | fileImports | child_process fs mongoose underscore |
| index.js:41:1:51:1 | functio ...  10);\\n} | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:51:1 | functio ...  10);\\n} | contextSurroundingFunctionParameters |  |
| index.js:41:1:51:1 | functio ...  10);\\n} | fileImports | child_process fs mongoose underscore |
| index.js:41:1:51:1 | return of function ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:1:51:1 | return of function ready | contextSurroundingFunctionParameters |  |
| index.js:41:1:51:1 | return of function ready | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:41:1:51:1 | return of function ready | enclosingFunctionName | ready |
| index.js:41:1:51:1 | return of function ready | fileImports | child_process fs mongoose underscore |
| index.js:41:10:41:14 | ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:10:41:14 | ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:41:10:41:14 | ready | contextSurroundingFunctionParameters |  |
| index.js:41:10:41:14 | ready | contextSurroundingFunctionParameters |  |
| index.js:41:10:41:14 | ready | contextSurroundingFunctionParameters | () |
| index.js:41:10:41:14 | ready | fileImports | child_process fs mongoose underscore |
| index.js:41:10:41:14 | ready | fileImports | child_process fs mongoose underscore |
| index.js:42:7:42:14 | !o.async | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:7:42:14 | !o.async | contextSurroundingFunctionParameters | () |
| index.js:42:7:42:14 | !o.async | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:7:42:14 | !o.async | enclosingFunctionName | ready |
| index.js:42:7:42:14 | !o.async | fileImports | child_process fs mongoose underscore |
| index.js:42:7:42:35 | !o.asyn ... te == 4 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:7:42:35 | !o.asyn ... te == 4 | contextSurroundingFunctionParameters | () |
| index.js:42:7:42:35 | !o.asyn ... te == 4 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:7:42:35 | !o.asyn ... te == 4 | enclosingFunctionName | ready |
| index.js:42:7:42:35 | !o.asyn ... te == 4 | fileImports | child_process fs mongoose underscore |
| index.js:42:7:42:50 | !o.asyn ... > 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:7:42:50 | !o.asyn ... > 10000 | contextSurroundingFunctionParameters | () |
| index.js:42:7:42:50 | !o.asyn ... > 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:7:42:50 | !o.asyn ... > 10000 | enclosingFunctionName | ready |
| index.js:42:7:42:50 | !o.asyn ... > 10000 | fileImports | child_process fs mongoose underscore |
| index.js:42:8:42:8 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:8:42:8 | o | contextSurroundingFunctionParameters | () |
| index.js:42:8:42:8 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:8:42:8 | o | enclosingFunctionName | ready |
| index.js:42:8:42:8 | o | fileImports | child_process fs mongoose underscore |
| index.js:42:8:42:14 | o.async | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:8:42:14 | o.async | contextSurroundingFunctionParameters | () |
| index.js:42:8:42:14 | o.async | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:8:42:14 | o.async | enclosingFunctionName | ready |
| index.js:42:8:42:14 | o.async | fileImports | child_process fs mongoose underscore |
| index.js:42:10:42:14 | async | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:10:42:14 | async | contextSurroundingFunctionParameters | () |
| index.js:42:10:42:14 | async | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:10:42:14 | async | enclosingFunctionName | ready |
| index.js:42:10:42:14 | async | fileImports | child_process fs mongoose underscore |
| index.js:42:19:42:19 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:19:42:19 | x | contextSurroundingFunctionParameters | () |
| index.js:42:19:42:19 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:19:42:19 | x | enclosingFunctionName | ready |
| index.js:42:19:42:19 | x | fileImports | child_process fs mongoose underscore |
| index.js:42:19:42:30 | x.readyState | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:19:42:30 | x.readyState | contextSurroundingFunctionParameters | () |
| index.js:42:19:42:30 | x.readyState | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:19:42:30 | x.readyState | enclosingFunctionName | ready |
| index.js:42:19:42:30 | x.readyState | fileImports | child_process fs mongoose underscore |
| index.js:42:19:42:35 | x.readyState == 4 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:19:42:35 | x.readyState == 4 | contextSurroundingFunctionParameters | () |
| index.js:42:19:42:35 | x.readyState == 4 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:19:42:35 | x.readyState == 4 | enclosingFunctionName | ready |
| index.js:42:19:42:35 | x.readyState == 4 | fileImports | child_process fs mongoose underscore |
| index.js:42:21:42:30 | readyState | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:21:42:30 | readyState | contextSurroundingFunctionParameters | () |
| index.js:42:21:42:30 | readyState | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:21:42:30 | readyState | enclosingFunctionName | ready |
| index.js:42:21:42:30 | readyState | fileImports | child_process fs mongoose underscore |
| index.js:42:35:42:35 | 4 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:35:42:35 | 4 | contextSurroundingFunctionParameters | () |
| index.js:42:35:42:35 | 4 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:35:42:35 | 4 | enclosingFunctionName | ready |
| index.js:42:35:42:35 | 4 | fileImports | child_process fs mongoose underscore |
| index.js:42:40:42:40 | c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:40:42:40 | c | contextSurroundingFunctionParameters | () |
| index.js:42:40:42:40 | c | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:40:42:40 | c | enclosingFunctionName | ready |
| index.js:42:40:42:40 | c | fileImports | child_process fs mongoose underscore |
| index.js:42:40:42:42 | c++ | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:40:42:42 | c++ | contextSurroundingFunctionParameters | () |
| index.js:42:40:42:42 | c++ | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:40:42:42 | c++ | enclosingFunctionName | ready |
| index.js:42:40:42:42 | c++ | fileImports | child_process fs mongoose underscore |
| index.js:42:40:42:50 | c++ > 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:40:42:50 | c++ > 10000 | contextSurroundingFunctionParameters | () |
| index.js:42:40:42:50 | c++ > 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:40:42:50 | c++ > 10000 | enclosingFunctionName | ready |
| index.js:42:40:42:50 | c++ > 10000 | fileImports | child_process fs mongoose underscore |
| index.js:42:46:42:50 | 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:42:46:42:50 | 10000 | contextSurroundingFunctionParameters | () |
| index.js:42:46:42:50 | 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:42:46:42:50 | 10000 | enclosingFunctionName | ready |
| index.js:42:46:42:50 | 10000 | fileImports | child_process fs mongoose underscore |
| index.js:43:9:43:9 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:9:43:9 | o | contextSurroundingFunctionParameters | () |
| index.js:43:9:43:9 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:9:43:9 | o | enclosingFunctionName | ready |
| index.js:43:9:43:9 | o | fileImports | child_process fs mongoose underscore |
| index.js:43:9:43:17 | o.success | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:9:43:17 | o.success | contextSurroundingFunctionParameters | () |
| index.js:43:9:43:17 | o.success | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:9:43:17 | o.success | enclosingFunctionName | ready |
| index.js:43:9:43:17 | o.success | fileImports | child_process fs mongoose underscore |
| index.js:43:9:43:30 | o.succe ... < 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:9:43:30 | o.succe ... < 10000 | contextSurroundingFunctionParameters | () |
| index.js:43:9:43:30 | o.succe ... < 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:9:43:30 | o.succe ... < 10000 | enclosingFunctionName | ready |
| index.js:43:9:43:30 | o.succe ... < 10000 | fileImports | child_process fs mongoose underscore |
| index.js:43:9:43:49 | o.succe ...  == 200 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:9:43:49 | o.succe ...  == 200 | contextSurroundingFunctionParameters | () |
| index.js:43:9:43:49 | o.succe ...  == 200 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:9:43:49 | o.succe ...  == 200 | enclosingFunctionName | ready |
| index.js:43:9:43:49 | o.succe ...  == 200 | fileImports | child_process fs mongoose underscore |
| index.js:43:11:43:17 | success | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:11:43:17 | success | contextSurroundingFunctionParameters | () |
| index.js:43:11:43:17 | success | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:11:43:17 | success | enclosingFunctionName | ready |
| index.js:43:11:43:17 | success | fileImports | child_process fs mongoose underscore |
| index.js:43:22:43:22 | c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:22:43:22 | c | contextSurroundingFunctionParameters | () |
| index.js:43:22:43:22 | c | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:22:43:22 | c | enclosingFunctionName | ready |
| index.js:43:22:43:22 | c | fileImports | child_process fs mongoose underscore |
| index.js:43:22:43:30 | c < 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:22:43:30 | c < 10000 | contextSurroundingFunctionParameters | () |
| index.js:43:22:43:30 | c < 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:22:43:30 | c < 10000 | enclosingFunctionName | ready |
| index.js:43:22:43:30 | c < 10000 | fileImports | child_process fs mongoose underscore |
| index.js:43:26:43:30 | 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:26:43:30 | 10000 | contextSurroundingFunctionParameters | () |
| index.js:43:26:43:30 | 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:26:43:30 | 10000 | enclosingFunctionName | ready |
| index.js:43:26:43:30 | 10000 | fileImports | child_process fs mongoose underscore |
| index.js:43:35:43:35 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:35:43:35 | x | contextSurroundingFunctionParameters | () |
| index.js:43:35:43:35 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:35:43:35 | x | enclosingFunctionName | ready |
| index.js:43:35:43:35 | x | fileImports | child_process fs mongoose underscore |
| index.js:43:35:43:42 | x.status | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:35:43:42 | x.status | contextSurroundingFunctionParameters | () |
| index.js:43:35:43:42 | x.status | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:35:43:42 | x.status | enclosingFunctionName | ready |
| index.js:43:35:43:42 | x.status | fileImports | child_process fs mongoose underscore |
| index.js:43:35:43:49 | x.status == 200 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:35:43:49 | x.status == 200 | contextSurroundingFunctionParameters | () |
| index.js:43:35:43:49 | x.status == 200 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:35:43:49 | x.status == 200 | enclosingFunctionName | ready |
| index.js:43:35:43:49 | x.status == 200 | fileImports | child_process fs mongoose underscore |
| index.js:43:37:43:42 | status | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:37:43:42 | status | contextSurroundingFunctionParameters | () |
| index.js:43:37:43:42 | status | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:37:43:42 | status | enclosingFunctionName | ready |
| index.js:43:37:43:42 | status | fileImports | child_process fs mongoose underscore |
| index.js:43:47:43:49 | 200 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:43:47:43:49 | 200 | contextSurroundingFunctionParameters | () |
| index.js:43:47:43:49 | 200 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:43:47:43:49 | 200 | enclosingFunctionName | ready |
| index.js:43:47:43:49 | 200 | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:7 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:7 | o | contextSurroundingFunctionParameters | () |
| index.js:44:7:44:7 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:7 | o | enclosingFunctionName | ready |
| index.js:44:7:44:7 | o | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:15 | o.success | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:15 | o.success | contextSurroundingFunctionParameters | () |
| index.js:44:7:44:15 | o.success | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:15 | o.success | enclosingFunctionName | ready |
| index.js:44:7:44:15 | o.success | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:20 | o.success.call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:20 | o.success.call | contextSurroundingFunctionParameters | () |
| index.js:44:7:44:20 | o.success.call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:20 | o.success.call | enclosingFunctionName | ready |
| index.js:44:7:44:20 | o.success.call | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:64 | exceptional return of o.succe ... , x, o) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:64 | exceptional return of o.succe ... , x, o) | contextSurroundingFunctionParameters |  |
| index.js:44:7:44:64 | exceptional return of o.succe ... , x, o) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:64 | exceptional return of o.succe ... , x, o) | enclosingFunctionName | ready |
| index.js:44:7:44:64 | exceptional return of o.succe ... , x, o) | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:64 | o.succe ... , x, o) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:64 | o.succe ... , x, o) | contextSurroundingFunctionParameters | () |
| index.js:44:7:44:64 | o.succe ... , x, o) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:64 | o.succe ... , x, o) | enclosingFunctionName | ready |
| index.js:44:7:44:64 | o.succe ... , x, o) | fileImports | child_process fs mongoose underscore |
| index.js:44:7:44:64 | reflective call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:7:44:64 | reflective call | contextSurroundingFunctionParameters |  |
| index.js:44:7:44:64 | reflective call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:7:44:64 | reflective call | enclosingFunctionName | ready |
| index.js:44:7:44:64 | reflective call | fileImports | child_process fs mongoose underscore |
| index.js:44:9:44:15 | success | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:9:44:15 | success | contextSurroundingFunctionParameters | () |
| index.js:44:9:44:15 | success | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:9:44:15 | success | enclosingFunctionName | ready |
| index.js:44:9:44:15 | success | fileImports | child_process fs mongoose underscore |
| index.js:44:17:44:20 | call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:17:44:20 | call | contextSurroundingFunctionParameters | () |
| index.js:44:17:44:20 | call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:17:44:20 | call | enclosingFunctionName | ready |
| index.js:44:17:44:20 | call | fileImports | child_process fs mongoose underscore |
| index.js:44:22:44:22 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:22:44:22 | o | contextSurroundingFunctionParameters | () |
| index.js:44:22:44:22 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:22:44:22 | o | enclosingFunctionName | ready |
| index.js:44:22:44:22 | o | fileImports | child_process fs mongoose underscore |
| index.js:44:22:44:36 | o.success_scope | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:22:44:36 | o.success_scope | InputArgumentIndex | 0 |
| index.js:44:22:44:36 | o.success_scope | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:22:44:36 | o.success_scope | contextSurroundingFunctionParameters | () |
| index.js:44:22:44:36 | o.success_scope | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:22:44:36 | o.success_scope | enclosingFunctionName | ready |
| index.js:44:22:44:36 | o.success_scope | fileImports | child_process fs mongoose underscore |
| index.js:44:24:44:36 | success_scope | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:24:44:36 | success_scope | contextSurroundingFunctionParameters | () |
| index.js:44:24:44:36 | success_scope | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:24:44:36 | success_scope | enclosingFunctionName | ready |
| index.js:44:24:44:36 | success_scope | fileImports | child_process fs mongoose underscore |
| index.js:44:39:44:40 | '' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:39:44:40 | '' | contextSurroundingFunctionParameters | () |
| index.js:44:39:44:40 | '' | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:39:44:40 | '' | enclosingFunctionName | ready |
| index.js:44:39:44:40 | '' | fileImports | child_process fs mongoose underscore |
| index.js:44:39:44:40 | '' | stringConcatenatedWith |  -endpoint- x.responseText |
| index.js:44:39:44:57 | '' + x.responseText | CalleeFlexibleAccessPath | o.success |
| index.js:44:39:44:57 | '' + x.responseText | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:39:44:57 | '' + x.responseText | InputArgumentIndex | 0 |
| index.js:44:39:44:57 | '' + x.responseText | InputArgumentIndex | 1 |
| index.js:44:39:44:57 | '' + x.responseText | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:39:44:57 | '' + x.responseText | contextSurroundingFunctionParameters | () |
| index.js:44:39:44:57 | '' + x.responseText | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:39:44:57 | '' + x.responseText | enclosingFunctionName | ready |
| index.js:44:39:44:57 | '' + x.responseText | fileImports | child_process fs mongoose underscore |
| index.js:44:44:44:44 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:44:44:44 | x | contextSurroundingFunctionParameters | () |
| index.js:44:44:44:44 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:44:44:44 | x | enclosingFunctionName | ready |
| index.js:44:44:44:44 | x | fileImports | child_process fs mongoose underscore |
| index.js:44:44:44:57 | x.responseText | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:44:44:57 | x.responseText | contextSurroundingFunctionParameters | () |
| index.js:44:44:44:57 | x.responseText | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:44:44:57 | x.responseText | enclosingFunctionName | ready |
| index.js:44:44:44:57 | x.responseText | fileImports | child_process fs mongoose underscore |
| index.js:44:44:44:57 | x.responseText | stringConcatenatedWith | '' -endpoint-  |
| index.js:44:46:44:57 | responseText | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:46:44:57 | responseText | contextSurroundingFunctionParameters | () |
| index.js:44:46:44:57 | responseText | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:46:44:57 | responseText | enclosingFunctionName | ready |
| index.js:44:46:44:57 | responseText | fileImports | child_process fs mongoose underscore |
| index.js:44:60:44:60 | x | CalleeFlexibleAccessPath | o.success |
| index.js:44:60:44:60 | x | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:60:44:60 | x | InputArgumentIndex | 1 |
| index.js:44:60:44:60 | x | InputArgumentIndex | 2 |
| index.js:44:60:44:60 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:60:44:60 | x | contextSurroundingFunctionParameters | () |
| index.js:44:60:44:60 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:60:44:60 | x | enclosingFunctionName | ready |
| index.js:44:60:44:60 | x | fileImports | child_process fs mongoose underscore |
| index.js:44:63:44:63 | o | CalleeFlexibleAccessPath | o.success |
| index.js:44:63:44:63 | o | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:63:44:63 | o | InputArgumentIndex | 2 |
| index.js:44:63:44:63 | o | InputArgumentIndex | 3 |
| index.js:44:63:44:63 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:44:63:44:63 | o | contextSurroundingFunctionParameters | () |
| index.js:44:63:44:63 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:44:63:44:63 | o | enclosingFunctionName | ready |
| index.js:44:63:44:63 | o | fileImports | child_process fs mongoose underscore |
| index.js:45:14:45:14 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:45:14:45:14 | o | contextSurroundingFunctionParameters | () |
| index.js:45:14:45:14 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:45:14:45:14 | o | enclosingFunctionName | ready |
| index.js:45:14:45:14 | o | fileImports | child_process fs mongoose underscore |
| index.js:45:14:45:20 | o.error | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:45:14:45:20 | o.error | contextSurroundingFunctionParameters | () |
| index.js:45:14:45:20 | o.error | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:45:14:45:20 | o.error | enclosingFunctionName | ready |
| index.js:45:14:45:20 | o.error | fileImports | child_process fs mongoose underscore |
| index.js:45:16:45:20 | error | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:45:16:45:20 | error | contextSurroundingFunctionParameters | () |
| index.js:45:16:45:20 | error | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:45:16:45:20 | error | enclosingFunctionName | ready |
| index.js:45:16:45:20 | error | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:7 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:7 | o | contextSurroundingFunctionParameters | () |
| index.js:46:7:46:7 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:7 | o | enclosingFunctionName | ready |
| index.js:46:7:46:7 | o | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:13 | o.error | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:13 | o.error | contextSurroundingFunctionParameters | () |
| index.js:46:7:46:13 | o.error | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:13 | o.error | enclosingFunctionName | ready |
| index.js:46:7:46:13 | o.error | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:18 | o.error.call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:18 | o.error.call | contextSurroundingFunctionParameters | () |
| index.js:46:7:46:18 | o.error.call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:18 | o.error.call | enclosingFunctionName | ready |
| index.js:46:7:46:18 | o.error.call | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:76 | exceptional return of o.error ... , x, o) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:76 | exceptional return of o.error ... , x, o) | contextSurroundingFunctionParameters |  |
| index.js:46:7:46:76 | exceptional return of o.error ... , x, o) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:76 | exceptional return of o.error ... , x, o) | enclosingFunctionName | ready |
| index.js:46:7:46:76 | exceptional return of o.error ... , x, o) | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:76 | o.error ... , x, o) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:76 | o.error ... , x, o) | contextSurroundingFunctionParameters | () |
| index.js:46:7:46:76 | o.error ... , x, o) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:76 | o.error ... , x, o) | enclosingFunctionName | ready |
| index.js:46:7:46:76 | o.error ... , x, o) | fileImports | child_process fs mongoose underscore |
| index.js:46:7:46:76 | reflective call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:7:46:76 | reflective call | contextSurroundingFunctionParameters |  |
| index.js:46:7:46:76 | reflective call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:7:46:76 | reflective call | enclosingFunctionName | ready |
| index.js:46:7:46:76 | reflective call | fileImports | child_process fs mongoose underscore |
| index.js:46:9:46:13 | error | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:9:46:13 | error | contextSurroundingFunctionParameters | () |
| index.js:46:9:46:13 | error | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:9:46:13 | error | enclosingFunctionName | ready |
| index.js:46:9:46:13 | error | fileImports | child_process fs mongoose underscore |
| index.js:46:15:46:18 | call | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:15:46:18 | call | contextSurroundingFunctionParameters | () |
| index.js:46:15:46:18 | call | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:15:46:18 | call | enclosingFunctionName | ready |
| index.js:46:15:46:18 | call | fileImports | child_process fs mongoose underscore |
| index.js:46:20:46:20 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:20:46:20 | o | contextSurroundingFunctionParameters | () |
| index.js:46:20:46:20 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:20:46:20 | o | enclosingFunctionName | ready |
| index.js:46:20:46:20 | o | fileImports | child_process fs mongoose underscore |
| index.js:46:20:46:32 | o.error_scope | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:20:46:32 | o.error_scope | InputArgumentIndex | 0 |
| index.js:46:20:46:32 | o.error_scope | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:20:46:32 | o.error_scope | contextSurroundingFunctionParameters | () |
| index.js:46:20:46:32 | o.error_scope | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:20:46:32 | o.error_scope | enclosingFunctionName | ready |
| index.js:46:20:46:32 | o.error_scope | fileImports | child_process fs mongoose underscore |
| index.js:46:22:46:32 | error_scope | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:22:46:32 | error_scope | contextSurroundingFunctionParameters | () |
| index.js:46:22:46:32 | error_scope | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:22:46:32 | error_scope | enclosingFunctionName | ready |
| index.js:46:22:46:32 | error_scope | fileImports | child_process fs mongoose underscore |
| index.js:46:35:46:35 | c | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:35:46:35 | c | contextSurroundingFunctionParameters | () |
| index.js:46:35:46:35 | c | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:35:46:35 | c | enclosingFunctionName | ready |
| index.js:46:35:46:35 | c | fileImports | child_process fs mongoose underscore |
| index.js:46:35:46:43 | c > 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:35:46:43 | c > 10000 | contextSurroundingFunctionParameters | () |
| index.js:46:35:46:43 | c > 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:35:46:43 | c > 10000 | enclosingFunctionName | ready |
| index.js:46:35:46:43 | c > 10000 | fileImports | child_process fs mongoose underscore |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | CalleeFlexibleAccessPath | o.error |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | InputArgumentIndex | 0 |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | InputArgumentIndex | 1 |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | contextSurroundingFunctionParameters | () |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | enclosingFunctionName | ready |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | fileImports | child_process fs mongoose underscore |
| index.js:46:39:46:43 | 10000 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:39:46:43 | 10000 | contextSurroundingFunctionParameters | () |
| index.js:46:39:46:43 | 10000 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:39:46:43 | 10000 | enclosingFunctionName | ready |
| index.js:46:39:46:43 | 10000 | fileImports | child_process fs mongoose underscore |
| index.js:46:47:46:57 | 'TIMED_OUT' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:47:46:57 | 'TIMED_OUT' | contextSurroundingFunctionParameters | () |
| index.js:46:47:46:57 | 'TIMED_OUT' | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:47:46:57 | 'TIMED_OUT' | enclosingFunctionName | ready |
| index.js:46:47:46:57 | 'TIMED_OUT' | fileImports | child_process fs mongoose underscore |
| index.js:46:61:46:69 | 'GENERAL' | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:61:46:69 | 'GENERAL' | contextSurroundingFunctionParameters | () |
| index.js:46:61:46:69 | 'GENERAL' | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:61:46:69 | 'GENERAL' | enclosingFunctionName | ready |
| index.js:46:61:46:69 | 'GENERAL' | fileImports | child_process fs mongoose underscore |
| index.js:46:72:46:72 | x | CalleeFlexibleAccessPath | o.error |
| index.js:46:72:46:72 | x | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:72:46:72 | x | InputArgumentIndex | 1 |
| index.js:46:72:46:72 | x | InputArgumentIndex | 2 |
| index.js:46:72:46:72 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:72:46:72 | x | contextSurroundingFunctionParameters | () |
| index.js:46:72:46:72 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:72:46:72 | x | enclosingFunctionName | ready |
| index.js:46:72:46:72 | x | fileImports | child_process fs mongoose underscore |
| index.js:46:75:46:75 | o | CalleeFlexibleAccessPath | o.error |
| index.js:46:75:46:75 | o | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:75:46:75 | o | InputArgumentIndex | 2 |
| index.js:46:75:46:75 | o | InputArgumentIndex | 3 |
| index.js:46:75:46:75 | o | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:46:75:46:75 | o | contextSurroundingFunctionParameters | () |
| index.js:46:75:46:75 | o | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:46:75:46:75 | o | enclosingFunctionName | ready |
| index.js:46:75:46:75 | o | fileImports | child_process fs mongoose underscore |
| index.js:48:5:48:5 | x | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:48:5:48:5 | x | contextSurroundingFunctionParameters | () |
| index.js:48:5:48:5 | x | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:48:5:48:5 | x | enclosingFunctionName | ready |
| index.js:48:5:48:5 | x | fileImports | child_process fs mongoose underscore |
| index.js:48:5:48:12 | x = null | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:48:5:48:12 | x = null | contextSurroundingFunctionParameters | () |
| index.js:48:5:48:12 | x = null | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:48:5:48:12 | x = null | enclosingFunctionName | ready |
| index.js:48:5:48:12 | x = null | fileImports | child_process fs mongoose underscore |
| index.js:48:9:48:12 | null | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:48:9:48:12 | null | contextSurroundingFunctionParameters | () |
| index.js:48:9:48:12 | null | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:48:9:48:12 | null | enclosingFunctionName | ready |
| index.js:48:9:48:12 | null | fileImports | child_process fs mongoose underscore |
| index.js:50:2:50:2 | w | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:2:50:2 | w | contextSurroundingFunctionParameters | () |
| index.js:50:2:50:2 | w | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:2:50:2 | w | enclosingFunctionName | ready |
| index.js:50:2:50:2 | w | fileImports | child_process fs mongoose underscore |
| index.js:50:2:50:13 | w.setTimeout | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:2:50:13 | w.setTimeout | contextSurroundingFunctionParameters | () |
| index.js:50:2:50:13 | w.setTimeout | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:2:50:13 | w.setTimeout | enclosingFunctionName | ready |
| index.js:50:2:50:13 | w.setTimeout | fileImports | child_process fs mongoose underscore |
| index.js:50:2:50:24 | exceptional return of w.setTi ... dy, 10) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:2:50:24 | exceptional return of w.setTi ... dy, 10) | contextSurroundingFunctionParameters |  |
| index.js:50:2:50:24 | exceptional return of w.setTi ... dy, 10) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:2:50:24 | exceptional return of w.setTi ... dy, 10) | enclosingFunctionName | ready |
| index.js:50:2:50:24 | exceptional return of w.setTi ... dy, 10) | fileImports | child_process fs mongoose underscore |
| index.js:50:2:50:24 | w.setTi ... dy, 10) | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:2:50:24 | w.setTi ... dy, 10) | contextSurroundingFunctionParameters | () |
| index.js:50:2:50:24 | w.setTi ... dy, 10) | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:2:50:24 | w.setTi ... dy, 10) | enclosingFunctionName | ready |
| index.js:50:2:50:24 | w.setTi ... dy, 10) | fileImports | child_process fs mongoose underscore |
| index.js:50:4:50:13 | setTimeout | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:4:50:13 | setTimeout | contextSurroundingFunctionParameters | () |
| index.js:50:4:50:13 | setTimeout | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:4:50:13 | setTimeout | enclosingFunctionName | ready |
| index.js:50:4:50:13 | setTimeout | fileImports | child_process fs mongoose underscore |
| index.js:50:15:50:19 | ready | CalleeFlexibleAccessPath | w.setTimeout |
| index.js:50:15:50:19 | ready | InputArgumentIndex | 0 |
| index.js:50:15:50:19 | ready | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:15:50:19 | ready | contextSurroundingFunctionParameters | () |
| index.js:50:15:50:19 | ready | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:15:50:19 | ready | enclosingFunctionName | ready |
| index.js:50:15:50:19 | ready | fileImports | child_process fs mongoose underscore |
| index.js:50:15:50:19 | ready | receiverName | w |
| index.js:50:22:50:23 | 10 | CalleeFlexibleAccessPath | w.setTimeout |
| index.js:50:22:50:23 | 10 | InputArgumentIndex | 1 |
| index.js:50:22:50:23 | 10 | contextFunctionInterfaces | c()\nf(cb)\nmain()\nready()\nwithCallback(cb) |
| index.js:50:22:50:23 | 10 | contextSurroundingFunctionParameters | () |
| index.js:50:22:50:23 | 10 | enclosingFunctionBody | o async x readyState 4 c 10000 o success c 10000 x status 200 o success call o success_scope  x responseText x o o error o error call o error_scope c 10000 TIMED_OUT GENERAL x o x null w setTimeout ready 10 |
| index.js:50:22:50:23 | 10 | enclosingFunctionName | ready |
| index.js:50:22:50:23 | 10 | fileImports | child_process fs mongoose underscore |
| index.js:50:22:50:23 | 10 | receiverName | w |
invalidTokenFeatures
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | CalleeFlexibleAccessPath | safe |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | CalleeFlexibleAccessPath | safe.call |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | InputArgumentIndex | 0 |
| autogenerated/Xss/ExceptionXss/exception-xss.js:68:19:68:21 | foo | InputArgumentIndex | 1 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | CalleeFlexibleAccessPath | ?.map |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | CalleeFlexibleAccessPath | ?.map.call |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | InputArgumentIndex | 0 |
| autogenerated/XssThroughDom/IncompleteSanitization/tst.js:266:45:266:52 | attr_str | InputArgumentIndex | 1 |
| index.js:44:39:44:57 | '' + x.responseText | CalleeFlexibleAccessPath | o.success |
| index.js:44:39:44:57 | '' + x.responseText | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:39:44:57 | '' + x.responseText | InputArgumentIndex | 0 |
| index.js:44:39:44:57 | '' + x.responseText | InputArgumentIndex | 1 |
| index.js:44:60:44:60 | x | CalleeFlexibleAccessPath | o.success |
| index.js:44:60:44:60 | x | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:60:44:60 | x | InputArgumentIndex | 1 |
| index.js:44:60:44:60 | x | InputArgumentIndex | 2 |
| index.js:44:63:44:63 | o | CalleeFlexibleAccessPath | o.success |
| index.js:44:63:44:63 | o | CalleeFlexibleAccessPath | o.success.call |
| index.js:44:63:44:63 | o | InputArgumentIndex | 2 |
| index.js:44:63:44:63 | o | InputArgumentIndex | 3 |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | CalleeFlexibleAccessPath | o.error |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | InputArgumentIndex | 0 |
| index.js:46:35:46:69 | c > 100 ... ENERAL' | InputArgumentIndex | 1 |
| index.js:46:72:46:72 | x | CalleeFlexibleAccessPath | o.error |
| index.js:46:72:46:72 | x | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:72:46:72 | x | InputArgumentIndex | 1 |
| index.js:46:72:46:72 | x | InputArgumentIndex | 2 |
| index.js:46:75:46:75 | o | CalleeFlexibleAccessPath | o.error |
| index.js:46:75:46:75 | o | CalleeFlexibleAccessPath | o.error.call |
| index.js:46:75:46:75 | o | InputArgumentIndex | 2 |
| index.js:46:75:46:75 | o | InputArgumentIndex | 3 |